1128214 matches found
EUVD-2026-93603
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93599
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106252
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect comparison in the Fonts component. This flaw could allow a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . No specific exploit details or mitigation workarounds a...
CVE-2026-106252
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93593
Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93591
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93595
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-106191
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Actor component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to potentially execute arbitrary code outside the sandbox by navigating to a craf...
CVE-2026-106191
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93596
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106250
A missing authorization vulnerability in the Actor component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering to trick a user into visiting a crafted HTML page . The Chr...
EUVD-2026-93597
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106312
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-93587
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106409
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106409
Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to an incorrect reference resolution in WebAppInstalls . This flaw allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by providing crafted network traffic. The v...
EUVD-2026-93585
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93586
Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93590
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106409
Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...