CVE-2026-121040

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121231

Google Chrome versions prior to 157.0.8103.38 are vulnerable to an incorrect authorization flaw within DevTools . A remote attacker can leverage a crafted HTML page to bypass system access restrictions. This vulnerability is categorized as a Medium security severity issue by Chromium.

EUVD-2026-116467

Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121122

Google Chrome versions prior to 157.0.8103.38 are vulnerable to a UI misrepresentation flaw in the Prompts component. A remote attacker can leverage social engineering to spoof UI elements by serving a crafted HTML page. This issue is classified with a Medium security severity. No specific exploi...

CVE-2026-121200

Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121177

UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121234

A privilege elevation flaw exists in the Contacts component of the Chromium browser (used in Google Chrome on Android). A remote attacker could potentially execute arbitrary code outside the sandbox by interacting with a crafted HTML page . This vulnerability affects versions prior to 157.0.8103....

CVE-2026-121177

UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121177

A UI misrepresentation flaw was discovered in the PageInfo component of Google Chrome on iOS prior to version 157.0.8103.38 . This vulnerability allows a remote attacker to spoof UI elements by delivering a crafted HTML page . The Chromium security severity for this issue is rated as Medium . No ...

CVE-2026-121234

Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121196

A privilege elevation vulnerability exists in Google Chrome on iOS versions prior to 157.0.8103.38 . This flaw allows a remote attacker to bypass system access restrictions to reach a privileged page by using a crafted HTML page . The vulnerability is associated with CWE-250 (Execution with Unnec...

EUVD-2026-116452

Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121099

Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121196

Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116453

Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121099

An information leak flaw exists in the PrivateTokens component of the Google Chrome browser, affecting versions prior to 157.0.8103.38 . A remote attacker can exploit this vulnerability to obtain sensitive information by enticing a user to visit a crafted HTML page . No specific exploit details o...

CVE-2026-121099

Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-116449

Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121161

Information leak in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121062

Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...