PT-2026-107040

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

PT-2026-107082

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Permissions allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

PT-2026-107088

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Code injection in Extensions allows a remote attacker to spoof UI elements through the use of a crafted Chrome extension, typically leveraging social engineering to execute the attack...

PT-2026-107092

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An incorrect calculation in an API allows a remote attacker to spoof UI elements through a crafted Chrome extension, provided the attacker uses social engineering to induce the user to...

CVE-2026-106179: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106229: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106251: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

PT-2026-106935

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incomplete cleanup in the GetUserMedia function allows a remote attacker to spoof UI elements. This occurs when an attacker has already compromised the renderer process and uses social...

PT-2026-106945

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in Chromoting on Windows allows a remote attacker to potentially spoof UI elements through crafted network traffic by leveraging social engineering. Recommendations...

PT-2026-106990

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

PT-2026-106857

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in Paint allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 155.0.8059.39 or late...

PT-2026-106958

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description UI misrepresentation in WebAppInstalls allows a remote attacker to bypass system access restrictions through the use of a crafted HTML page and social engineering. Recommendations Updat...

PT-2026-107009

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107017

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use of released resource in Session allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations Update Google...

PT-2026-107044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the user interface allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A sandbox is a security...

PT-2026-107052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An issue exists where a remote attacker can use social engineering and a specially crafted HTML page to spoof UI elements, leading to UI misrepresentation. Recommendations Update Google...

CVE-2026-106187: Missing Authorization

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106270: Incorrect Authorization

Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106372: Incorrect Authorization

Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106955

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A UI misrepresentation issue exists in the WebOTP Web One-Time Password feature. This allows a remote attacker to spoof user interface elements by using a specially crafted HTML page...