CVE-2026-106296

Google Chrome on macOS versions prior to 155.0.8059.39 is vulnerable to improper privilege management within the UI. A remote attacker could use social engineering to trick a user into interacting with a crafted HTML page , which could then be used to bypass system access restrictions . The Chrom...

CVE-2026-106285

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation issue within the WebAppInstalls component. A remote attacker can use social engineering and a crafted HTML page to bypass system access restrictions. The impact is categorized as Low by Chromium security. Remed...

EUVD-2026-93610

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299

Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299

Google Chrome versions prior to 155.0.8059.39 are affected by an improper input validation flaw in the WebAudio component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. This vulnerability is rated as Low severi...

EUVD-2026-93602

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93592

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Permissions . A remote attacker who has already compromised the renderer process and uses social engineering can use a crafted HTML page to bypass system access restrictions. The Chromium security seve...

CVE-2026-106263

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106404

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93769

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106263

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106263

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity security issue. The flaw stems from improper input validation within the SignIn component, which could allow a remote attacker to bypass system access restrictions. This attack requires the use of social engineering...

CVE-2026-106229

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...