CVE-2026-106264

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Web Authentication (Passkeys & Security Keys) . This security issue allows a remote attacker to spoof UI elements when a user visits a crafted HTML page. The chromium security severity for this vulnera...

EUVD-2026-93616

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Missing Authorization flaw in Permissions. A remote attacker who has already compromised the renderer process can use a crafted HTML page to spoof UI elements . The Chromium security severity for this issue is rated as Low . No spe...

EUVD-2026-93599

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106317

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in FullScreen mode. A remote attacker can exploit this by serving a crafted HTML page to spoof the address bar . The Chromium security severity is rated as Low , and the issue is associated with ...

EUVD-2026-93591

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106317

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106338

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106276

UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106338

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the PictureInPicture functionality. A remote attacker can utilize a crafted HTML page to spoof the address bar , potentially misleading users. This issue has a Chromium security severity o...

CVE-2026-106276

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation issue within the Payments component. A remote attacker can leverage social engineering to spoof UI elements by hosting a crafted HTML page. The vulnerability is categorized as having Low security severity by Ch...

CVE-2026-106372

A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization in the UI. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . The vulnerability is categorized as having a Medium secur...

EUVD-2026-93585

Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106338

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93590

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...