CVE-2026-17666
Critical · 9.1CVSS
9.1
EPSS
0.2%
Published
Jul 30, 2026
CISA due date
—
The record
Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access control via malicious network traffic. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-16000 Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in… CWE-325
- CVE-2026-25250 EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic… CWE-325
- CVE-2026-76784 Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections… CWE-325
- CVE-2026-59776 Missing Cryptographic Step (CWE-325) vulnerability exists in certain FeliCa IC chips… CWE-325
- CVE-2026-58638 Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass… CWE-325
- CVE-2026-55144 Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform… CWE-325
- CVE-2026-6458 Missing cryptographic step in Caliptra Core Firmware (aes_256_gcm_update module) results… CWE-325
- CVE-2026-49440 Deno is a JavaScript, TypeScript, and WebAssembly runtime. CWE-325