Google

Chrome

5853 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2026-17818

  • EPSS 0.17%
  • Veröffentlicht 30.07.2026 00:19:30
  • Zuletzt bearbeitet 03.08.2026 17:41:53

Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17819

  • EPSS 0.22%
  • Veröffentlicht 30.07.2026 00:19:30
  • Zuletzt bearbeitet 03.08.2026 17:41:45

Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

4.3

CVE-2026-17820

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:30
  • Zuletzt bearbeitet 03.08.2026 17:41:30

Insufficient policy enforcement in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17821

  • EPSS 0.17%
  • Veröffentlicht 30.07.2026 00:19:30
  • Zuletzt bearbeitet 03.08.2026 17:41:21

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security sever...

4.3

CVE-2026-17815

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:29
  • Zuletzt bearbeitet 03.08.2026 17:52:02

Insufficient policy enforcement in GuestView in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

7.5

CVE-2026-17816

  • EPSS 0.27%
  • Veröffentlicht 30.07.2026 00:19:29
  • Zuletzt bearbeitet 03.08.2026 17:42:14

Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medi...

4.3

CVE-2026-17817

  • EPSS 0.16%
  • Veröffentlicht 30.07.2026 00:19:29
  • Zuletzt bearbeitet 03.08.2026 17:42:01

Inappropriate implementation in ReportingAndNEL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

7.1

CVE-2026-17811

  • EPSS 0.17%
  • Veröffentlicht 30.07.2026 00:19:28
  • Zuletzt bearbeitet 03.08.2026 15:00:48

Use after free in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

5.4

CVE-2026-17812

  • EPSS 0.2%
  • Veröffentlicht 30.07.2026 00:19:28
  • Zuletzt bearbeitet 03.08.2026 17:52:26

Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

6.5

CVE-2026-17813

  • EPSS 0.23%
  • Veröffentlicht 30.07.2026 00:19:28
  • Zuletzt bearbeitet 03.08.2026 17:52:20

Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)