CVE-2026-17939
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:25:36
- Zuletzt bearbeitet 03.08.2026 17:28:09
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-17940
- EPSS 0.25%
- Veröffentlicht 30.07.2026 00:25:36
- Zuletzt bearbeitet 03.08.2026 13:46:45
Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (C...
CVE-2026-17941
- EPSS 0.23%
- Veröffentlicht 30.07.2026 00:25:36
- Zuletzt bearbeitet 03.08.2026 19:06:13
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17937
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:25:35
- Zuletzt bearbeitet 03.08.2026 17:28:17
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17938
- EPSS 0.23%
- Veröffentlicht 30.07.2026 00:25:35
- Zuletzt bearbeitet 03.08.2026 13:47:37
Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17934
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:57
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17935
- EPSS 0.34%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:42
Heap buffer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17936
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:25:34
- Zuletzt bearbeitet 03.08.2026 17:28:31
Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: ...
CVE-2026-17932
- EPSS 0.11%
- Veröffentlicht 30.07.2026 00:25:33
- Zuletzt bearbeitet 03.08.2026 15:00:58
Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17933
- EPSS 0.16%
- Veröffentlicht 30.07.2026 00:25:33
- Zuletzt bearbeitet 03.08.2026 17:29:06
Inappropriate implementation in DOMStorage in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)