DEBIAN-CVE-2026-95321

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95309

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95288

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95280

Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-95275

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89160

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95309

UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95279

UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95367

An information leak exists in the DataTransfer component of Google Chrome versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to obtain sensitive information. Remediation is available in version 15...

CVE-2026-95327

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95327

Information leak in Networking in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95334

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect reference resolution in the WebProtect component. A remote attacker who has successfully compromised the renderer process could exploit this flaw to execute arbitrary code outside the sandbox using a crafted HTML page. R...

CVE-2026-95321

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-89136

UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95374

A remote attacker can bypass the web origin policy in Google Chrome prior to version 154.0.8037.57 due to incorrect authorization in the Network component. This vulnerability can be triggered by a crafted HTML page . Remediation is provided in version 154.0.8037.57 , and details regarding specifi...

EUVD-2026-89133

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95363

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw within the FileSystem component. A remote attacker can utilize social engineering and a crafted HTML page to spoof UI elements. Remediation is available in version 154.0.8037.57 , with specific fixes confi...

CVE-2026-95314

A vulnerability in Google Chrome prior to version 154.0.8037.57 allows a remote attacker who has compromised the renderer process to bypass system access restrictions. The root cause is incorrect authorization in HID , which can be triggered via a crafted HTML page . This issue has been addressed...

CVE-2026-95330

Google Chrome versions prior to 154.0.8037.57 are vulnerable to improper state validation in the Downloads component. This flaw allows a remote attacker to bypass system access restrictions by navigating to a crafted HTML page . The impact is rated as Medium by Chromium security standards. Remedi...

CVE-2026-95330

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...