AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-17870

Google Chrome: improper input validation

Google

CVE-2026-17870 · Published Jul 30, 2026 · updated Aug 3, 2026

Medium4.3
Fix: upgrade to 151.0.7922.72 or later
Google advisory

Insufficient validation of untrusted input in Cast in Google Chrome prior to 151.0.7922.72 allowed an attacker on the local network segment to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.72, < 151.0.7922.72151.0.7922.72
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20

More Google advisories

All Google
Medium 4.3Jul 30Google Chrome: spoofingCVE-2026-18013fixed in 151.0.7922.72Medium 6.5Jul 30Google Chrome: remote attacker could bypass navigation restrictionsCVE-2026-18014fixed in 151.0.7922.72Critical 9.6Jul 30Google Chrome: remote attacker could potentially perform a sandbox escapeCVE-2026-18015fixed in 151.0.7922.72Medium 4.3Jul 30Google Chrome: spoofingCVE-2026-18016fixed in 151.0.7922.72High 8.8Jul 30Google Chrome: use after freeCVE-2026-18017fixed in 151.0.7922.72Medium 4.0Jul 30Google Chrome: spoofingCVE-2026-18018fixed in 151.0.7922.72