CVE-2026-106336

An observable discrepancy flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522722456...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Chromium CVE-2026-87563: Origin validation error in Paint

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260915-73-0106

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0071

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260914-73-0077

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0070

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

ROS-20260914-73-0080

The vulnerability of the Paint component in Google Chrome and Microsoft Edge browsers relates to the ability to bypass authentication by using a user-controlled password. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260911-73-0060

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0144

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0120

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0102

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0153

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created HTML page...

CVE-2026-87651

An incorrect authorization flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=550141694...

DEBIAN-CVE-2026-87651

Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of the Paint component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to compromise data integrity.

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...