Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-17893 Insufficient validation of untrusted input in Updater
Chromium: CVE-2026-17890 Insufficient validation of untrusted input in DevTools
Chromium: CVE-2026-17885 Inappropriate implementation in Paint
Chromium: CVE-2026-18014 Insufficient validation of untrusted input in DevTools
Chromium: CVE-2026-18006 Inappropriate implementation in Google Lens
Chromium: CVE-2026-17714 Uninitialized Use in ANGLE
Chromium: CVE-2026-17859 Side-channel information leakage in Favicons
Chromium: CVE-2026-17858 Uninitialized Use in WebNN
Chromium: CVE-2026-17988 Insufficient validation of untrusted input in Navigation
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-17851 Side-channel information leakage in Autofill
Chromium: CVE-2026-17974 Insufficient policy enforcement in DevTools
Chromium: CVE-2026-17849 Inappropriate implementation in Chrome for iOS
Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI
Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPI
Chromium: CVE-2026-17846 Inappropriate implementation in Media
Chromium: CVE-2026-11694 Use after free in ServiceWorker
Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI
Chromium: CVE-2026-17827 Inappropriate implementation in CSS
Chromium: CVE-2026-12459 Inappropriate implementation in Serial
Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access
Chromium: CVE-2026-17696 Side-channel information leakage in Media
Chromium: CVE-2026-17815 Insufficient policy enforcement in GuestView
Chromium: CVE-2026-17820 Insufficient policy enforcement in Autofill
Chromium: CVE-2026-17959 Inappropriate implementation in Network
Chromium: CVE-2026-17955 Insufficient validation of untrusted input in Payments
Chromium: CVE-2026-17954 Policy bypass in MHTML
Chromium: CVE-2026-17958 Inappropriate implementation in Views
Chromium: CVE-2026-11677 Race in Network