CVE Vulnerability Catalog

Translated CVE descriptions from NVD NIST - in English

CISA KEV catalog updated: (v2026.08.21)

Weekly CVE digest

One email a week with newly published vulnerabilities worth knowing about. No account needed.

This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.

I agree to receive the weekly CVE digest at the address above. I can withdraw this consent at any time using the link in the footer of every message.

CVE-2026-17924
Critical

Use after free in the DNS component in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17865
Critical

Inappropriate implementation in the Crypto component in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17856
Critical

Inappropriate implementation in the Network component in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17855
Critical

A race condition in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17848
Critical

Integer overflow in Codecs in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.

CVE-2026-17847
Critical

Insufficient validation of untrusted input in ANGLE in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17837
Critical

Insufficient validation of untrusted input in DevTools in Google Chrome allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.

CVE-2026-17834
Critical

Insufficient validation of untrusted input in Passwords in Google Chrome allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.

CVE-2026-17832
Critical

Use after free in ANGLE in Google Chrome allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability affects versions prior to 151.0.7922.72.

CVE-2026-17804
Critical

Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17803
Critical

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file.

CVE-2026-17801
Critical

Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17768
Critical

Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17758
Critical

Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17749
Critical

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

CVE-2026-17738
Critical

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17727
Critical

Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17726
Critical

Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17721
Critical

Out-of-bounds write in the ANGLE component in Google Chrome prior to 151.0.7922.72. A remote attacker could potentially perform a sandbox escape via a crafted HTML page.

CVE-2026-17718
Critical

Use-after-free vulnerability in the ANGLE component in Google Chrome prior to 151.0.7922.72. A remote attacker could potentially perform a sandbox escape via a crafted HTML page.

PreviousPage 69 of 730Next

Vulnerability data from NVD (NIST) · CISA KEV · EPSS