CVE-2026-106237

An information leak flaw exists in the Permissions component of the Chromium browser (Google Chrome) in versions prior to 155.0.8059.39 . A remote attacker can exploit this vulnerability using a crafted HTML page to bypass site isolation . While the Chromium security severity is rated as Low , th...

CVE-2026-106199

In Google Chrome on Android versions prior to 155.0.8059.39 , an incorrect authorization flaw in the Actor component allows a remote attacker who has already compromised the renderer process to potentially bypass site isolation . This can be achieved by serving a crafted HTML page . The Chromium ...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93609

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106384

Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93580

Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106271

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Workers . A remote attacker who has already compromised the renderer process can use a crafted PDF file to bypass site isolation . The vulnerability is rated with Medium severity by Chromium and has a ...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-106271

Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...

EUVD-2026-93748

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Accessibility component. This vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation using a crafted HTML page. The Chromium security ...

CVE-2026-106205

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93682

Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106425

Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106267

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106267

A missing authorization flaw exists in the Network component of the Chromium browser, affecting versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . Remediation is available in version 155.0.805...

EUVD-2026-93805

Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-106369

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Translate component. This vulnerability allows a remote attacker who has already compromised the renderer process to bypass site isolation by using a crafted HTML page. The vulnerability is associa...