CVE-2026-106279: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-106856

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect reference resolution in DevTools allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.39/.40 for Windows and Mac and 155.0.8059.39 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2026-95334: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in WebProtect in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-100680

Budibase versions before 3.45.0 fail to disable external JSON reference resolution in the OpenAPI/Swagger import validator, allowing authenticated builders to read arbitrary local files. Attackers with builder access can embed file:// references in OpenAPI specifications submitted to the import...

Chromium CVE-2026-95334: Incorrect reference resolution in WebProtect

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95275: Incorrect reference resolution in MediaStream

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-87562

A flaw was found in chromium-browser. A remote attacker could exploit incorrect reference resolution in the Accessibility feature by enticing a user to visit a specially crafted HTML page. This could allow the attacker to potentially spoof user interface UI elements, leading to confusion or...

CVE-2026-79254

A flaw was found in Google Chrome on Android. Specifically, the CustomTabs feature suffers from incorrect reference resolution. A remote attacker could exploit this vulnerability by presenting a specially crafted HTML page, which could allow them to bypass system access restrictions...

Linux Distros Unpatched Vulnerability : CVE-2026-95275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged pa...

Linux Distros Unpatched Vulnerability : CVE-2026-95334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in WebProtect. CVE-2026-95334 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 809...

CVE-2026-93375

A flaw was found in Google Chrome. This vulnerability, located in the Tracing component, involves incorrect reference resolution. A local attacker could exploit this flaw by using a local program, potentially leading to arbitrary code execution outside the browser's security sandbox...

Chromium CVE-2026-91727: Incorrect reference resolution

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-93375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code...

DEBIAN-CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

EUVD-2026-82477

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...