CVE-2026-17978
Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS probability
- 0.21%
- CWE
- CWE-1300
- Published
- 2026-07-30
- Last modified
- 2026-07-30
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-18019 — Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17942 — Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17914 — Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17907 — Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17859 — Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17851 — Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17802 — Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed...
- CVE-2026-17800 — Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a...