CVE-2026-106257

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw in the HTML component. A remote attacker could exploit this by providing a crafted HTML page to execute arbitrary code inside the sandbox. Remediation is available in version 155.0.8059.39 and later. Specific de...

CVE-2026-106278

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106257

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106318

A Use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Information regarding specific exploit availability is not provided...

CVE-2026-106257

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106329

Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93819

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93824

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106203

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incomplete cleanup issue in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially resulting in the theft of sensitive information . No specif...

CVE-2026-106273

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the Video component. A remote attacker who has already compromised the renderer process can exploit this to read memory outside the sandbox by viewing a crafted HTML page. The Chromium security sever...

CVE-2026-106203

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106193

A use after free vulnerability exists in the Parser component of Google Chrome versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Exploitation details are not provided in the documentation.

EUVD-2026-93816

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93818

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Google Chrome on Windows is vulnerable to an uninitialized resource flaw in the ANGLE component prior to version 155.0.8059.39 . A remote attacker can leverage this vulnerability by viewing a crafted HTML page to read memory outside the sandbox . This issue was reported by Google and has been add...

CVE-2026-106323

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw (CWE-862). A remote attacker could leverage social engineering to trick a user into interacting with a crafted HTML page , potentially leading to the execution of arbitrary code outside the sandbox ...

CVE-2026-106231

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106323

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...