CVE-2026-106251

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106269

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106385

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106385

A race condition vulnerability exists in the Chromoting component of Google Chrome (versions prior to 155.0.8059.39 ). A remote attacker could potentially bypass system access restrictions by using crafted network traffic combined with social engineering . This issue was addressed in the Chromium...

CVE-2026-106236

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the Chromoting component. A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. No specific exploit information or manual workarounds are prov...

CVE-2026-106390

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a flaw in the SanitizerAPI . Due to an incorrect provision of specified functionality , a remote attacker can leak sensitive information by hosting a crafted HTML page. The vulnerability is classified with a Low security severity by ...

CVE-2026-106334

An information leak in the Payments component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to obtain sensitive information. The vulnerability is triggered by a remote attacker leveraging social engineering to trick a user into visiting a crafted HTML page . The impa...

CVE-2026-106294

A remote attacker can bypass system access restrictions by sending crafted network traffic to Google Chrome on Mac running versions prior to 155.0.8059.39 . The vulnerability is caused by an incomplete cleanup flaw within the Chromoting component. While Chromium classifies the severity as low, CV...

CVE-2026-106325

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect reference resolution flaw within the Core component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, which can then be used to leak cross-origin data . Exploitation de...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106390

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93645

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93648

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93643

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106390

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106334

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106325

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106334

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93647

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...