CVE-2026-106201

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106279

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-106279

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

EUVD-2026-93700

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93701

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106261

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a medium-severity issue involving an uninitialized resource in Video . This flaw allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page. While specific exploit details are not provided, the vu...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106290

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106378

Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to a privilege elevation flaw within the Sandbox . A remote attacker who has already compromised the renderer process can utilize a crafted HTML page to execute arbitrary code outside the sandbox. The vulnerability is associated w...

CVE-2026-106290

A vulnerability exists in the GPU component of the Chromium browser , specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 . The root cause is an uninitialized resource flaw, which could allow a remote attacker who has already compromised the renderer process to read me...

CVE-2026-106378

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106290

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93696

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

A vulnerability in Google Chrome on iOS (prior to version 155.0.8059.39 ) was caused by improper input validation . A remote attacker could use social engineering to trick a user into visiting a crafted HTML page , potentially leading to the execution of arbitrary code outside the sandbox . While...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106335

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw within the Media component. A remote attacker can exploit this vulnerability by tricking a user into visiting a crafted HTML page , which could result in arbitrary code execution inside the sandbox. No specific ...

CVE-2026-106335

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...