24476 matches found
CVE-2026-106323: Missing Authorization
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-106893
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Passwords component that allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to...
PT-2026-107008
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Paint process allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...
CVE-2026-106220: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106215: Use of Uninitialized Resource
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-107032
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Payments component that allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information...
PT-2026-107016
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Permissions allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...
PT-2026-107047
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in Dawn allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to versi...
PT-2026-107056
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...
PT-2026-107064
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the WebAudio component. A remote attacker can potentially leak cross-origin data, which refers to data belonging to a different origin domain, protocol, or...
PT-2026-107022
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Browser component allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google...
PT-2026-106901
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Google Lens allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a...
PT-2026-106982
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-107018
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper state validation in DevTools allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrom...
PT-2026-106929
Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106375: Incomplete Cleanup
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106307: Incorrect Authorization
Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106342: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106334: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
