CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2.236 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-17861 High · 7.8 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Updater in Google Chrome prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
CVE-2026-17860 Low · 3.3 CWE-20 Jul 29, 2026
Improper Input Validation in Google Chrome
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a malicious file. (Chromium security severity: Medium)
CVE-2026-17848 Critical · 9.6 CWE-20 Jul 29, 2026
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-17847 Critical · 9.6 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17844 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17837 Critical · 9.6 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17834 Critical · 9.6 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17831 Medium · 6.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17814 Medium · 6.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151...
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17809 Medium · 5.8 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17806 Medium · 5.8 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17803 Critical · 9.6 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922...
Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. (Chromium security severity: Medium)
CVE-2026-17799 Medium · 5.4 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922...
Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass discretionary access control via a malicious file. (Chromium security severity: Medium)
CVE-2026-17795 Medium · 4.3 CWE-20 Jul 29, 2026
Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a...
Inappropriate implementation in GetUserMedia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17794 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0...
Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17791 Medium · 6.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17789 Medium · 6.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151...
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17786 High · 8.8 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17774 High · 7.5 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17773 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17769 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17768 Critical · 9.6 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72...
Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17767 Medium · 4.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0...
Insufficient validation of untrusted input in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17766 Low · 3.3 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151...
Insufficient validation of untrusted input in Clipboard in Google Chrome on Android prior to 151.0.7922.72 allowed a local attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17761 Medium · 5.4 CWE-20 Jul 29, 2026
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151...
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)