Google

Chrome

6881 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2026-17737

  • EPSS 0.18%
  • Veröffentlicht 30.07.2026 00:19:07
  • Zuletzt bearbeitet 03.08.2026 13:47:21

Use after free in Bluetooth in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-17730

  • EPSS 0.22%
  • Veröffentlicht 30.07.2026 00:19:06
  • Zuletzt bearbeitet 31.07.2026 15:28:27

Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medi...

4.3

CVE-2026-17731

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:06
  • Zuletzt bearbeitet 03.08.2026 13:47:01

Inappropriate implementation in Autofill in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-17733

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:06
  • Zuletzt bearbeitet 03.08.2026 13:47:15

Inappropriate implementation in QUIC in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-17734

  • EPSS 0.21%
  • Veröffentlicht 30.07.2026 00:19:06
  • Zuletzt bearbeitet 10.08.2026 14:14:10

Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-17728

  • EPSS 0.21%
  • Veröffentlicht 30.07.2026 00:19:05
  • Zuletzt bearbeitet 10.08.2026 14:14:03

Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-17729

  • EPSS 0.34%
  • Veröffentlicht 30.07.2026 00:19:05
  • Zuletzt bearbeitet 10.08.2026 14:14:06

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

3.1

CVE-2026-17732

  • EPSS 0.17%
  • Veröffentlicht 30.07.2026 00:19:05
  • Zuletzt bearbeitet 03.08.2026 17:45:30

Inappropriate implementation in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

9.6

CVE-2026-17758

  • EPSS 0.34%
  • Veröffentlicht 30.07.2026 00:19:05
  • Zuletzt bearbeitet 03.08.2026 17:56:52

Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

8.8

CVE-2026-17725

  • EPSS 0.41%
  • Veröffentlicht 30.07.2026 00:19:04
  • Zuletzt bearbeitet 03.08.2026 17:45:36

Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)