CVE-2026-106292

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106307

Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93746

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

A confused deputy vulnerability exists in the Contextual Tasks component of Google Chrome (prior to version 155.0.8059.39 ). An attacker who has already compromised the renderer process can exploit this flaw by convincing a user to open a crafted HTML page. This allows the attacker to bypass syst...

CVE-2026-106403

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Accessibility component. This vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation using a crafted HTML page. The Chromium security ...

CVE-2026-106391

Google Chrome on Android, specifically the WebShare component in versions prior to 155.0.8059.39 , contains an incorrect authorization flaw. A remote attacker who has already compromised the renderer process can exploit this vulnerability to spoof user interface (UI) elements via a crafted HTML p...

CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93739

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106205

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Passwords component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . This vulnerability has a Medium security sev...

CVE-2026-106226

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity issue caused by improper input validation in the Compositing component. A remote attacker who has successfully compromised the renderer process can exploit this flaw to spoof the address bar by serving a crafted HTM...

CVE-2026-106230

Google Chrome on Android is affected by a vulnerability prior to version 155.0.8059.39 . The flaw stems from an incorrect reference resolution in the Offline component, which allows a remote attacker who has already compromised the renderer process to obtain sensitive information through a crafte...

CVE-2026-106230

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106230

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93741

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93733

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...