CVE-2026-106235

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007 2026-10-08 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mxfl77q6hi2u...

CVE-2026-106379

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106361

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106180

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106295

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106339

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106345

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106380

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007...

CVE-2026-106274

creationtimestamp| type| source ---|---|--- 2026-10-06 19:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261007 2026-10-09 11:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mxgv4dnsrt2u...

CVE-2026-106310

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource within the FontAccess component. A remote attacker who has already compromised the renderer process can exploit this issue to bypass web origin policy by serving a crafted HTML page. The vulnerability is cl...

CVE-2026-106269

A Use after free vulnerability exists in the CSS component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . While the Chromium security severity is listed as Low, the CVSS 3.1 s...

CVE-2026-106251

Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in Chromoting . A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. This issue is categorized as a Low security severity by Chromium. No specific explo...

CVE-2026-106272

Google Chrome on Windows prior to version 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in Chromoting . A remote attacker leveraging social engineering can use crafted network traffic to potentially spoof UI elements . The Chromium security severity for this issue is Low . No specifi...

CVE-2026-106234

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw in the Network component. This vulnerability could allow a remote attacker to potentially execute arbitrary code outside the sandbox by leveraging social engineering to interact with a crafted Chrome extension ....

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106345

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106234

Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Low...