VULNERABILITY INTELLIGENCE

CVE index

Use CVSS, EPSS, CISA KEV, affected-version data, and source evidence as separate signals for prioritization.

NVD data is used under its public data terms. This service is not endorsed or certified by NVD.
17,661 CVE recordsPage 45 of 1178 · EPSS data 2026.08.06
ReviewCritical
CVE-2026-17691

Google Chrome, chrome, windows

Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17688

Google Chrome, chrome

Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17687

Google Chrome, chrome

Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-17686

Google Chrome, chrome

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-17685

Google Chrome, chrome

Use after free in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17684

Google Chrome, chrome, iphone os

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17682

Google Chrome, chrome

Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17681

Google Chrome, chrome, android

Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17680

Google Chrome, chrome, chrome os

Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-17678

Google Chrome, chrome

Out of bounds read in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewHigh
CVE-2026-17677

Google Chrome, chrome, android

Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17676

Google Chrome, chrome, android

Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17675

Google Chrome, chrome

Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17673

Google Chrome, chrome

Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.
ReviewCritical
CVE-2026-17672

Google Chrome, chrome

Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

The CVSS severity warrants an early asset and exposure review.