CVE-2026-17866
Medium · 5.8CVSS
5.8
EPSS
0.2%
Published
Jul 30, 2026
CISA due date
—
The record
Type Confusion in Tab in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-843
- CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-88090 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration… CWE-843
- CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length… CWE-843
- CVE-2026-112659 A type confusion issue was addressed with improved memory handling. CWE-843