CVE-2026-106254

Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106254

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information leak (CWE-200). This vulnerability allows a local attacker to obtain sensitive information through a co-installed application. Exploitation details and specific proof-of-concept links are not provided in the ...

CVE-2026-106254

Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106337

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106337

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106337

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106337

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The vulnerability is associated with CWE-451 . No specific exploitation details or mitigation steps are p...

EUVD-2026-93767

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106395

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource flaw in the Dawn component. A remote attacker can exploit this by hosting a crafted HTML page to read memory outside the sandbox . No specific exploitation details or remediation steps are provided...

CVE-2026-106395

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93761

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106391

Google Chrome on Android versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the WebShare component. A remote attacker who has already compromised the renderer process can exploit this issue to spoof UI elements by serving a crafted HTML page. The Chromium sec...

CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93746

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93742

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

EUVD-2026-93741

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106367

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to missing authorization (CWE-862). A local attacker using social engineering could potentially execute arbitrary code outside the sandbox through a co-installed application. No specific exploit details or information regardin...

CVE-2026-106205

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw within the Passwords component. A remote attacker who successfully compromises the renderer process can exploit this issue using a crafted HTML page to bypass site isolation . The Chromium secur...

EUVD-2026-93739

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106367

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...