CVE-2026-106407

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. An attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions . No specific exploit details or in-the-wild ...

EUVD-2026-93690

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106244

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the permissions subsystem . This vulnerability allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic . Successful exploitation can result in unaut...

EUVD-2026-93691

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106185

Google Chrome versions prior to 155.0.8059.39 are vulnerable to improper input validation in Viz . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. The Chromium security severity for this issue is Medium . No spec...

CVE-2026-106363

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process and utilized social engineering can bypass system access restrictions by serving a crafted HTML page. Th...

EUVD-2026-93853

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106327

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in Core . This vulnerability allows a remote attacker who has already compromised the renderer process to bypass system access restrictions by utilizing a crafted HTML page . The Chromium security seve...

EUVD-2026-93791

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86362

Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86362

Dell System Update , versions prior to 2.3.0.0 , contains an Improper Access Control vulnerability (CWE-284). A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges . Documentation indicates that the manufacturer recommends updating to version 2.3.0.0...

EUVD-2026-93790

Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-86361

Dell System Update, versions prior to 2.3.0.0 , contains an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732 ). A low privileged attacker with local access could potentially exploit this flaw to achieve elevation of privileges . Dell recommends updating the software to...

CVE-2026-56952

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93789

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

A permission bypass vulnerability exists in the platform_msg_handler_init function within default_msg_handlers.c . The flaw is caused by a missing permission check , which could allow for a local escalation of privilege requiring System execution privileges . This vulnerability does not require u...

EUVD-2026-93785

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55307

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55307

A logic error in the kdn_set_sysregs_prot function within the hwcrypto-kdn.c file can lead to a local information disclosure . Exploitation of this vulnerability requires System execution privileges , and no user interaction is required. While the technical impact is classified as partial, the co...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...