Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-15131 Insufficient data validation in Navigation
Chromium: CVE-2026-15128 Inappropriate implementation in Forms
Chromium: CVE-2026-15130 Insufficient policy enforcement in Navigation
Chromium: CVE-2026-15127 Inappropriate implementation in WebGL
Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords
Chromium: CVE-2026-15109 Uninitialized Use in ANGLE
Chromium: CVE-2026-15108 Integer overflow in Extensions API
Chromium: CVE-2026-15775 Insufficient policy enforcement in V8
Chromium: CVE-2026-17897 Inappropriate implementation in ORB
Chromium: CVE-2026-18019 Side-channel information leakage in Media
Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-15770 Uninitialized Use in V8
Chromium: CVE-2026-17895 Inappropriate implementation in DataTransfer
Chromium: CVE-2026-17892 Inappropriate implementation in WebXR
Chromium: CVE-2026-17893 Insufficient validation of untrusted input in Updater
Chromium: CVE-2026-17891 Use after free in ANGLE
Chromium: CVE-2026-18018 Inappropriate implementation in Updater
Chromium: CVE-2026-17890 Insufficient validation of untrusted input in DevTools
Chromium: CVE-2026-17724 Race in Chrome for iOS
Chromium: CVE-2026-17889 Uninitialized Use in WebXR
CVE-2026-19146 Uninitialized Use in GPU
Chromium: CVE-2026-13034 Inappropriate implementation in Passwords
Chromium: CVE-2026-17882 Policy bypass in Extensions
Chromium: CVE-2026-17885 Inappropriate implementation in Paint
Chromium: CVE-2026-17883 Inappropriate implementation in Headless
Chromium: CVE-2026-18016 Insufficient policy enforcement in Chrome for iOS
Chromium: CVE-2026-17880 Inappropriate implementation in Autofill
Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools