CVE-2026-17764
- EPSS 0.27%
- Veröffentlicht 30.07.2026 00:19:14
- Zuletzt bearbeitet 04.08.2026 14:38:47
Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17757
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:13
- Zuletzt bearbeitet 31.07.2026 15:29:47
Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17759
- EPSS 0.33%
- Veröffentlicht 30.07.2026 00:19:13
- Zuletzt bearbeitet 03.08.2026 17:56:21
Uninitialized Use in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17760
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:13
- Zuletzt bearbeitet 31.07.2026 15:29:11
Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17753
- EPSS 0.15%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 31.07.2026 15:29:00
Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17754
- EPSS 0.22%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:53
Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17755
- EPSS 0.18%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:44
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17756
- EPSS 0.27%
- Veröffentlicht 30.07.2026 00:19:12
- Zuletzt bearbeitet 04.08.2026 14:40:33
Insufficient policy enforcement in Presentation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17749
- EPSS 0.24%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 10.08.2026 14:14:34
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromi...
CVE-2026-17750
- EPSS 0.2%
- Veröffentlicht 30.07.2026 00:19:11
- Zuletzt bearbeitet 03.08.2026 17:58:25
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)