Threats Tagged 'cve-2026-17667'

This update for chromium fixes the following issues: Changes in chromium: - Chromium 151.0.7922.71 (boo#1272936): * CVE-2026-17650: Use after free in Compositing * CVE-2026-17651: Insufficient validation of untrusted input in Dawn * CVE-2026-17652: Use after free in Views * CVE-2026-17653: Use after free in Skia * CVE-2026-17654: Race in Updater * CVE-2026-17655: Insufficient validation of untrusted input in ANGLE * CVE-2026-17656: Use after free in Ozone * CVE-2026-17657: Use after free in Navigation * CVE-2026-17658: Use after free in V8 * CVE-2026-17659: Inappropriate implementation in SiteIsolation * CVE-2026-17660: Insufficient validation of untrusted input in Network * CVE-2026-17661: Use after free in Loader * CVE-2026-17662: Insufficient policy enforcement in Prefetch * CVE-2026-17663: Insufficient validation of untrusted input in GPU * CVE-2026-17664: Insufficient validation of untrusted input in Loader * CVE-2026-17665: Use after free in V8 * CVE-2026-17666: Cryptographic Flaw in Enterprise * CVE-2026-17667: Uninitialized Use in ANGLE * CVE-2026-17668: Uninitialized Use in ANGLE * CVE-2026-17669: Inappropriate implementation in Chrome for iOS * CVE-2026-17670: Use after free in Views * CVE-2026-17671: Insufficient validation of untrusted input in ANGLE * CVE-2026-17672: Insufficient validation of untrusted input in Chromecast * CVE-2026-17673: Integer overflow in QUIC * CVE-2026-17674: Inappropriate implementation in HTML * CVE-2026-17675: Out of bounds write in ANGLE * CVE-2026-17676: Inappropriate implementation in ANGLE * CVE-2026-17677: Inappropriate implementation in ANGLE * CVE-2026-17678: Out of bounds read in ANGLE * CVE-2026-17679: Insufficient validation of untrusted input in Print Preview * CVE-2026-17680: Heap buffer overflow in Color * CVE-2026-17681: Insufficient validation of untrusted input in Web Authentication * CVE-2026-17682: Integer overflow in ANGLE * CVE-2026-17683: Inappropriate implementation in ANGLE * CVE-2026-17684: Insufficient validation of untrusted input in Chrome for iOS * CVE-2026-17685: Use after free in Autofill * CVE-2026-17686: Insufficient validation of untrusted input in Passwords * CVE-2026-17687: Type Confusion in ANGLE * CVE-2026-17688: Use after free in Input * CVE-2026-17689: Uninitialized Use in ANGLE * CVE-2026-17690: Insufficient validation of untrusted input in PDF * CVE-2026-17691: Out of bounds write in ANGLE * CVE-2026-17692: Use after free in DataTransfer * CVE-2026-17693: Inappropriate implementation in FileSystem * CVE-2026-17694: Use after free in DOM * CVE-2026-17695: Inappropriate implementation in ANGLE * CVE-2026-17696: Side-channel information leakage in Media * CVE-2026-17697: Type Confusion in ANGLE * CVE-2026-17698: Insufficient validation of untrusted input in UI * CVE-2026-17699: Use after free in Views * CVE-2026-17700: Insufficient validation of untrusted input in Actor * CVE-2026-17701: Out of bounds read in ANGLE * CVE-2026-17702: Inappropriate implementation in Skia * CVE-2026-17703: Policy bypass in Chrome for iOS * CVE-2026-17704: Use after free in ANGLE * CVE-2026-17705: Integer overflow in libxml * CVE-2026-17706: Insufficient validation of untrusted input in Media * CVE-2026-17707: Uninitialized Use in Media * CVE-2026-17708: Use after free in Audio * CVE-2026-17709: Race in Downloads * CVE-2026-17710: Inappropriate implementation in MHTML * CVE-2026-17711: Race in Downloads * CVE-2026-17712: Race in Skia * CVE-2026-17713: Insufficient validation of untrusted input in Accessibility * CVE-2026-17714: Uninitialized Use in ANGLE * CVE-2026-17715: Inappropriate implementation in Passwords * CVE-2026-17716: Use after free in Updater * CVE-2026-17717: Integer overflow in ANGLE * CVE-2026-17718: Use after free in ANGLE * CVE-2026-17719: Use after free in Input * CVE-2026-17720: Insufficient policy enforcement in Passwords * CVE-2026-17721: Out of bounds write in ANGLE * CVE-2026-17722: Object lifecycle issue in WebView * CVE-2026-17723: Use after free in Media * CVE-2026-17724: Race in Chrome for iOS * CVE-2026-17725: Type Confusion in V8 * CVE-2026-17726: Integer overflow in WebGL * CVE-2026-17727: Out of bounds write in WebGL * CVE-2026-17728: Inappropriate implementation in Extensions * CVE-2026-17758: Heap buffer overflow in Dawn * CVE-2026-17732: Inappropriate implementation in SVG * CVE-2026-17729: Use after free in V8 * CVE-2026-17730: Side-channel information leakage in Autofill * CVE-2026-17731: Inappropriate implementation in Autofill * CVE-2026-17733: Inappropriate implementation in QUIC * CVE-2026-17734: Inappropriate implementation in Autofill * CVE-2026-17735: Insufficient validation of untrusted input in BFCache * CVE-2026-17736: Insufficient validation of untrusted input in WebView * CVE-2026-17737: Use after free in Bluetooth * CVE-20

Uninitialized Use in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-17667 is a vulnerability in Google Chrome's ANGLE component prior to version 151.0.7922.72. It involves uninitialized use that allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a CVSS score of 6.5, indicating medium severity. No known exploits in the wild have been reported. A vendor advisory is available but does not explicitly confirm patch status or remediation details.