CVE-2026-106282

UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106311

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106416

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93714

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106311

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106416

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93711

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106416

A code injection vulnerability exists in Google Chrome (prior to version 155.0.8059.39 ) within the Extensions framework. A remote attacker can use social engineering to trick a user into installing a crafted browser extension, enabling the attacker to spoof user interface (UI) elements . This ma...

CVE-2026-106282

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw in the WebOTP component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements. No specific exploit details or in-the-wild exploitation instances are provided in the docume...

CVE-2026-106302

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the PermissionElement component. A remote attacker can leverage social engineering to spoof UI elements by navigating a victim to a crafted HTML page. This vulnerability (CWE-451) allows for the man...

CVE-2026-106182

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the Paint component. A remote attacker can exploit this by using a crafted HTML page to spoof UI elements . This vulnerability is assigned CWE-451 and is classified with a Medium security severity b...

CVE-2026-106311

A clickjacking vulnerability exists in the PermissionElement component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can leverage social engineering to spoof UI elements by serving a crafted HTML page to a victim. The vulnerability is associated with CWE-1021 (Improper Restr...

EUVD-2026-93710

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within its Extensions component. A remote attacker can leverage social engineering to install a crafted Chrome extension that allows them to spoof UI elements . Exploitation details and specific proof-...

CVE-2026-106326

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-106326

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-106406

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93699

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...