CVE-2026-106226: Improper Input Validation

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106263: Improper Input Validation

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106331: Improper Input Validation

Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106353: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...

CVE-2026-106206: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106414: Improper Input Validation

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106860

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Viz allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...

PT-2026-106936

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in the SignIn function allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and using a crafted...

CVE-2026-106185: Improper Input Validation

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106881

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

PT-2026-106972

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in WebAudio allows a remote attacker who has compromised the renderer process to bypass system access restrictions through a crafted HTML page. Recommendations...

PT-2026-106899

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Compositing allows a remote attacker who has compromised the renderer process to spoof the address bar by using a crafted HTML page. Recommendations Update...

PT-2026-107086

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 155.0.8059.39 Description Improper input validation allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a user t...

PT-2026-107003

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper input validation in Extensions allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can...

ROS-20261006-73-0187

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2026-106632

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv4 ICMP implementation where the icmp route lookup function fails to properly reject RTN UNREACHABLE input routes. When a forward output route cannot be used, th...

CVE-2026-82989 CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2026-82989 CVE-2026-82989

There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints via network-based HTTP requests to unauthenticated endpoints...

CVE-2026-82989

ViewSonic ViewBoard smartboards, which run on an Android-based system, are vulnerable to an input injection flaw in the vCast software suite. The vulnerability exists in exposed network services, allowing a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP...

CVE-2026-105683

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version 6.27.0...