CVE-2026-106372

A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization in the UI. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . The vulnerability is categorized as having a Medium secur...

CVE-2026-106341

A type confusion vulnerability exists in the V8 engine of Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this flaw by delivering a crafted HTML page to potentially execute arbitrary code within the browser sandbox. While the CVSS score indicates a high base severity...

EUVD-2026-93578

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93581

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106207

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106207

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106386

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the WebAudio component. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page, leading to information disclosure where the attacker can read process memory inside th...

CVE-2026-106207

A race condition (CWE-367) within the V8 engine in Google Chrome versions prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by delivering a crafted HTML page to the victim. While the Chromium security severity is labeled as M...

CVE-2026-106401

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93763

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93762

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106395

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106401

Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106401

Google Chrome contains an out-of-bounds write vulnerability in its Media component (prior to version 155.0.8059.39). A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML page . This flaw could potentially comp...

EUVD-2026-93754

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106292

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a heap-based buffer overflow within the Fonts component. A remote attacker who has already compromised the renderer process can exploit this vulnerability to potentially execute arbitrary code outside the sandbox by hosting a crafted...

CVE-2026-106375

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup flaw in the Dawn component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific exploit details or manual workarounds are ...

CVE-2026-106373

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...