apk package

wolfi/chromium-lang

pkg:apk/wolfi/chromium-lang

Vulnerabilities (872)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2026-17848	Cri	9.6	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-17847	Cri	9.6	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17845	Med	6.1	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17844	Med	4.3	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17843	Med	4.3	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17842	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17841	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17840	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17839	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17838	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17837	Cri	9.6	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17836	Hig	8.8	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17835	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17834	Cri	9.6	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17833	Med	4.3	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17832	Cri	9.6	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17831	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17830	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17829	Med	4.3	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17828	Med	6.5	< 151.0.7922.75-r0	151.0.7922.75-r0	Jul 30, 2026	Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-17848CriJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
CVE-2026-17847CriJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17845MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17844MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17843MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17842MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17841MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17840MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17839MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17838MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17837CriJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17836HigJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17835MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17834CriJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17833MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17832CriJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17831MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17830MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17829MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Insufficient policy enforcement in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17828MedJul 30, 2026
affected < 151.0.7922.75-r0fixed 151.0.7922.75-r0
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Page 11 of 44