EUVD-2026-93723

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93721

Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...

EUVD-2026-93709

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106361

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106361

Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to an incorrect provision of specified functionality (CWE-684 ). A remote attacker could use social engineering and crafted network traffic to bypass the web origin policy . No specific exploits or in-the-wild exploitation details ...

EUVD-2026-93702

Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106198

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization issue in the FileSystem component. A remote attacker who has already compromised the renderer process can exploit this vulnerability by using a crafted HTML page to bypass the web origin policy . The Chromium ...

CVE-2026-106198

Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93695

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93697

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106408

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106408

A protection mechanism failure in the Mobile component of Google Chrome on iOS (prior to version 155.0.8059.39 ) allows a remote attacker to bypass web origin policy policies by visiting a crafted HTML page. This vulnerability is classified as Medium severity by Chromium. Exploitation details are...

CVE-2026-106196

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Navigation component. A remote attacker can exploit this by using a crafted HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The vulnerability is ...

CVE-2026-106408

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106189

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93686

Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106189

Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a code injection flaw in ReaderMode . A remote attacker can leverage social engineering to bypass the web origin policy by tricking a user into visiting a crafted HTML page. The Chromium security severity is rated as Medium . Ex...

CVE-2026-106381

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93680

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...