CVE-2026-106339

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93639

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106320

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use of Released Resource in UI (CWE-672). A remote attacker who has already compromised the renderer process can exploit this flaw to spoof UI elements by serving a crafted HTML page. This issue is classified as Low severity by Chr...

CVE-2026-106413

A race condition in the browser component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to spoof UI elements using a crafted HTML page. This vulnerability is categorized with a Low security severity by Chromium. No specif...

CVE-2026-106247

Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93613

Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106247

A heap-based buffer overflow exists in the ANGLE component of Google Chrome in versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can leverage a crafted HTML page to potentially achieve arbitrary code execution outside the sandbox. Remediation is ...

CVE-2026-106299

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93610

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93609

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106199

In Google Chrome on Android versions prior to 155.0.8059.39 , an incorrect authorization flaw in the Actor component allows a remote attacker who has already compromised the renderer process to potentially bypass site isolation . This can be achieved by serving a crafted HTML page . The Chromium ...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93599

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Missing Authorization flaw in Permissions. A remote attacker who has already compromised the renderer process can use a crafted HTML page to spoof UI elements . The Chromium security severity for this issue is rated as Low . No spe...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93596

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Permissions . A remote attacker who has already compromised the renderer process and uses social engineering can use a crafted HTML page to bypass system access restrictions. The Chromium security seve...