Browse CVEs

MEDIUM 6.1 CVE-2026-17962 Inappropriate implementation in Blink in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) vi… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 5.4 CVE-2026-17903 Insufficient policy enforcement in Chromecast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to inject scri… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17878 Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17845 Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17853 Inappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process t… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17827 Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17818 Inappropriate implementation in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) … Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-17797 Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 5.4 CVE-2026-17734 Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS)… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 5.4 CVE-2026-17728 Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXS… Chrome 151.0.7922.72+ Fix from $1,6002026-07-30 MEDIUM 6.1 CVE-2026-15127 Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) v… Chrome 150.0.7871.115+ Fix from $1,6002026-07-08 MEDIUM 6.1 CVE-2026-15128 Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) v… Chrome 150.0.7871.115+ Fix from $1,6002026-07-08 MEDIUM 6.1 CVE-2026-14147 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-14145 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-14068 Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in sp… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-14000 Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-14001 Inappropriate implementation in Network in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 5.4 CVE-2026-13977 Inappropriate implementation in HTMLParser in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXS… Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-13836 Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 150.0.7871.47+ Fix from $1,6002026-06-30 MEDIUM 6.1 CVE-2026-12459 Inappropriate implementation in Serial in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) … Chrome 149.0.7827.155+ Fix from $1,6002026-06-17 MEDIUM 6.1 CVE-2026-11273 Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engag… Chrome 149.0.7827.53+ Fix from $1,6002026-06-05 MEDIUM 6.1 CVE-2026-11186 Inappropriate implementation in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.8 CVE-2026-11166 Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 6.1 CVE-2026-11150 Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via … Chrome 149.0.7827.53+ Fix from $1,6002026-06-04 MEDIUM 5.4 CVE-2026-9971 Inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in speci… Chrome 148.0.7778.216+ Fix from $1,6002026-05-28 MEDIUM 5.4 CVE-2026-8012 Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to i… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 MEDIUM 5.4 CVE-2026-7958 Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 MEDIUM 5.4 CVE-2026-7939 Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML (U… Chrome 148.0.7778.96+ Fix from $1,6002026-05-06 HIGH 8.1 CVE-2025-13639 Inappropriate implementation in WebRTC in Google Chrome prior to 143.0.7499.41 allowed a remote attacker to perform arbitrary read/write via a crafte… Chrome 143.0.7499.40+ Fix from $1,9502025-12-02 MEDIUM 5.4 CVE-2025-13097 Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape vi… Chrome 136.0.7103.48 / 136.0.7103.59+ Fix from $1,6002025-11-14