PULSE
LIVE20signals / 24h
ES
FEED
ransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturing
← All CVEs
CVE WatchAug 3, 2026

CVE-2026-17985

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a c

CVSS

6.5

Medium

EPSS

0.2%

p14

KEV

—

Exploit Today

4

0-100

Published: Jul 30, 2026 · Last modified: Aug 3, 2026 · CWE-602

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-07-302026-08-03
Technical description

Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-179746.5 MED
7.5%
——2Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)1dCVE-2026-179604.3 MED
10.5%
——3Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)1dCVE-2026-179536.5 MED
14.3%
——4Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)23hCVE-2026-178216.5 MED
7.5%
——2Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)1dCVE-2026-178136.5 MED
14.3%
——4Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)1dCVE-2026-178056.5 MED
14.3%
——4Insufficient policy enforcement in Glic in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)1d