CVE-2026-110156

Google Chrome on Mac versions prior to 155.0.8059.79 is vulnerable to an incorrect reference resolution flaw in the Extensions component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox using a crafte...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

PT-2026-113477

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in the Passwords component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by...

PT-2026-113488

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description Incorrect reference resolution in Extensions on Mac allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted...

PT-2026-113492

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description Missing authorization in ReadingMode allows a remote attacker who has compromised the renderer process and used social engineering to potentially bypass site isolation through a crafted...

CVE-2026-109422

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

CVE-2026-109422

The NetEase Cloud Music client for Windows (cloudmusic.exe ) versions 3.1.38 and 3.1.39.205426 is vulnerable to Remote Code Execution (RCE) . The flaw exists in the renderer-process IPC bridge os.navigateExternal, which fails to validate the URL scheme before passing caller-supplied URLs to Shell...

EUVD-2026-97817

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

CVE-2026-109422: Exposed Dangerous Method or Function

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied URLs to ShellExecuteW without validating the URL scheme. An attacker able to...

CVE-2026-106388

A missing authorization flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550512266...

Linux Distros Unpatched Vulnerability : CVE-2026-106279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process ...

Linux Distros Unpatched Vulnerability : CVE-2026-106378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106320

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements v...

Linux Distros Unpatched Vulnerability : CVE-2026-106303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged...

Linux Distros Unpatched Vulnerability : CVE-2026-106284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and...

Linux Distros Unpatched Vulnerability : CVE-2026-106191

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

Linux Distros Unpatched Vulnerability : CVE-2026-106345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI...

Linux Distros Unpatched Vulnerability : CVE-2026-106228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...