CWE-346

Origin Validation Error

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product does not properly verify that the source of data or communication is valid.

684 vulnerabilities with CWE-346
CVE-2026-17871 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Password UI Gestures
CVSS 4.3
CVE-2026-17857 MEDIUM
Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Network Implementation
CVSS 4.3
CVE-2026-17843 MEDIUM
Chrome < 151.0.7922.72 - Cross-Origin Data Leak via CSS
CVSS 4.3
CVE-2026-17833 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Passwords Implementation
CVSS 4.3
CVE-2026-17829 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Passwords Policy Enforcement
CVSS 4.3
CVE-2026-17826 LOW
Google Chrome for iOS < 151.0.7922.72 - Cross-Origin Data Leak via UI Gesture Manipulation
CVSS 3.1
CVE-2026-17820 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill Policy Enforcement
CVSS 4.3
CVE-2026-17817 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via ReportingAndNEL Implementation
CVSS 4.3
CVE-2026-17815 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via GuestView
CVSS 4.3
CVE-2026-17798 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Cast Implementation
CVSS 4.3
CVE-2026-17788 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Blink Inappropriate Implementation
CVSS 4.3
CVE-2026-17783 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Loader Implementation
CVSS 4.3
CVE-2026-17777 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill Implementation
CVSS 4.3
CVE-2026-17775 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via PresentationAPI
CVSS 4.3
CVE-2026-17765 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via WebProtect Implementation Flaw
CVSS 4.3
CVE-2026-17763 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via GPU Implementation Flaw
CVSS 4.3
CVE-2026-17762 MEDIUM
Google Chrome for iOS < 151.0.7922.72 - Cross-Origin Data Leak via Crafted HTML Page
CVSS 4.3
CVE-2026-17753 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill Implementation
CVSS 4.3
CVE-2026-17742 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Payments Policy Enforcement
CVSS 4.3
CVE-2026-17733 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via QUIC Implementation on Android
CVSS 4.3
CVE-2026-17732 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via SVG Implementation
CVSS 3.1
CVE-2026-17731 MEDIUM
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Autofill on Android
CVSS 4.3
CVE-2026-17720 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Password Policy Enforcement Bypass
CVSS 3.1
CVE-2026-17715 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Password UI Gestures
CVSS 3.1
CVE-2026-17702 LOW
Google Chrome < 151.0.7922.72 - Cross-Origin Data Leak via Skia Renderer Implementation
CVSS 3.1
Details
Vulnerabilities 684