CVE-2026-121167

Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121091

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw within the Permissions component. This vulnerability allows a remote attacker who has already compromised the renderer process to obtain sensitive information by navigating the user to a crafted HTML p...

CVE-2026-121077

Use after free in Mobile in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121167

Google Chrome versions prior to 157.0.8103.38 are vulnerable to incorrect authorization in Permissions. A remote attacker who has already compromised the renderer process can bypass system access restrictions by navigating to a crafted HTML page. This vulnerability is assigned a Chromium security...

EUVD-2026-116313

Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121110

UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121158

Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121158

Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121042

Incorrect authorization in Permissions in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121042

Google Chrome on Android versions prior to 157.0.8103.38 is vulnerable to an incorrect authorization flaw in Permissions. A remote attacker can exploit this by hosting a crafted HTML page to bypass system access restrictions. The vulnerability is classified as a Medium security severity issue. No...

CVE-2026-121158

A remote attacker can exploit an information leak in the Paint component of Google Chrome (prior to version 157.0.8103.38) to obtain sensitive information. This vulnerability is triggered via a crafted HTML page . While technical details regarding the specific root cause are not provided in the d...

CVE-2026-121110

A UI misrepresentation flaw was identified in the Shopping component of the Google Chrome browser on Android (prior to version 157.0.8103.38 ). This vulnerability allows a remote attacker to spoof UI elements by serving a crafted HTML page to the user. The Chromium security severity for this issu...

CVE-2026-121110

UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116306

Information leak in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121223

Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121176

Uninitialized resource in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121223

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an observable discrepancy in the Media component. A remote attacker could leverage this flaw to leak cross-origin data by诱导 a user to visit a crafted HTML page . No specific exploit code or scanners are provided in the documents. Rem...

CVE-2026-121176

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an uninitialized resource flaw within the Media component. A remote attacker can exploit this by using a crafted HTML page to read memory inside the sandbox. The vulnerability is assigned a Medium security severity. Remediation is av...

EUVD-2026-116300

Incorrect authorization in Views in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121184

Out of bounds read in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...