46301 matches found
CVE-2026-106362
Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-93604
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
EUVD-2026-93607
Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-106353
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...
CVE-2026-106353
Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a web origin policy bypass . The root cause is improper input validation , which allows a remote attacker to bypass these policies by leveraging social engineering and a co-installed app . The security severity is rated as Low b...
CVE-2026-106359
A confused deputy vulnerability exists in the DeviceBoundSessionCredentials feature of Google Chrome (prior to version 155.0.8059.39 ). This flaw allows a remote attacker to trick the browser into misusing its authority by convincing a user to visit a specially crafted HTML page. Successful explo...
EUVD-2026-93594
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...
CVE-2026-106216
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93735
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106216
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106289
Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93730
Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106289
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in FedCM . This issue allows a remote attacker to bypass the web origin policy by providing a crafted HTML page. The vulnerability has been reported in the wild as of October 2026. Exploitation details or...
CVE-2026-106322
Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106280
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106280
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the PermissionElement component. This vulnerability allows a remote attacker to potentially bypass the web origin policy by navigating to a crafted HTML page . The flaw is assigned a Medium secu...
EUVD-2026-93722
Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93723
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106322
An open redirect vulnerability exists in the AppManifest component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can leverage social engineering to craft an HTML page that bypasses the web origin policy . The Chromium security severity for this issue is Medium . While specif...