EUVD-2026-93724

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106180

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in Animation (CWE-203). A remote attacker can exploit this flaw by hosting a crafted HTML page to potentially obtain cross-origin data . While no specific exploit code or manual is provided, the vulnerabilit...

CVE-2026-106188

Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106182

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the Paint component. A remote attacker can exploit this by using a crafted HTML page to spoof UI elements . This vulnerability is assigned CWE-451 and is classified with a Medium security severity b...

CVE-2026-106246

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the browser. This vulnerability allows a remote attacker to spoof the address bar by presenting a crafted HTML page to the user. The Chromium security severity for this issue is rated as Medium . No...

CVE-2026-106282

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw in the WebOTP component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements. No specific exploit details or in-the-wild exploitation instances are provided in the docume...

EUVD-2026-93717

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106406

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93698

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93704

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106244

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the permissions subsystem . This vulnerability allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic . Successful exploitation can result in unaut...

CVE-2026-106225

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106225

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially leading to the unauthorized disclosure of sensitive information ...

CVE-2026-106225

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106365

A missing authorization flaw in the Animation component of the Chromium browser (Google Chrome) allows a remote attacker to bypass web origin policy via a crafted HTML page. This vulnerability affects versions prior to 155.0.8059.39 . No specific exploit details or remediation steps are provided ...

CVE-2026-106324

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106222

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Sync component. A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . The vulnerability is assigned a Medium security severity. No specific ...