EUVD-2026-93754

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106292

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a heap-based buffer overflow within the Fonts component. A remote attacker who has already compromised the renderer process can exploit this vulnerability to potentially execute arbitrary code outside the sandbox by hosting a crafted...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106373

A use after free vulnerability exists in the Fonts component of Google Chrome on Windows in versions prior to 155.0.8059.39 . A remote attacker can exploit this flaw by viewing a crafted HTML page to achieve arbitrary code execution within the sandbox. Exploitation details are not provided in the...

CVE-2026-106373

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106373

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106367

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

EUVD-2026-93742

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-106367

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw. A local attacker could use social engineering to trick a user into executing arbitrary code outside the sandbox via a co-installed application. The vulnerability is categorized as Medium severi...

CVE-2026-106367

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an out-of-bounds read in the Printing component. A remote attacker who has already compromised the renderer process and leveraged social engineering can use a crafted HTML page to read memory outside the sandbox. This vulne...

EUVD-2026-93733

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93727

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93729

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106201

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106201

A race condition vulnerability exists in the V8 engine within Google Chrome versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by presenting a crafted HTML page . The vulnerability is classified with a High base severity (CVSS 3.1 sco...

CVE-2026-106228

A confused deputy vulnerability exists in Google Lens within Google Chrome versions prior to 155.0.8059.39 . An attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific expl...