CVE-2026-17742
- EPSS 0.15%
- Veröffentlicht 30.07.2026 00:19:09
- Zuletzt bearbeitet 31.07.2026 15:28:51
Insufficient policy enforcement in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17743
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:09
- Zuletzt bearbeitet 10.08.2026 14:14:25
Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17744
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:09
- Zuletzt bearbeitet 03.08.2026 17:45:16
Inappropriate implementation in File Input in Google Chrome on Linux prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17745
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:09
- Zuletzt bearbeitet 03.08.2026 17:45:06
Out of bounds read in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17738
- EPSS 0.32%
- Veröffentlicht 30.07.2026 00:19:08
- Zuletzt bearbeitet 10.08.2026 14:14:20
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security seve...
CVE-2026-17739
- EPSS 0.14%
- Veröffentlicht 30.07.2026 00:19:08
- Zuletzt bearbeitet 03.08.2026 17:45:21
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium secur...
CVE-2026-17740
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:08
- Zuletzt bearbeitet 31.07.2026 15:28:39
Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17741
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:08
- Zuletzt bearbeitet 03.08.2026 13:47:24
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17735
- EPSS 0.29%
- Veröffentlicht 30.07.2026 00:19:07
- Zuletzt bearbeitet 10.08.2026 14:14:15
Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security sever...
CVE-2026-17736
- EPSS 0.19%
- Veröffentlicht 30.07.2026 00:19:07
- Zuletzt bearbeitet 03.08.2026 13:47:19
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium sec...