CVE-2026-106328

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106180

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in Animation (CWE-203). A remote attacker can exploit this flaw by hosting a crafted HTML page to potentially obtain cross-origin data . While no specific exploit code or manual is provided, the vulnerabilit...

CVE-2026-106333

A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization within the Input component. A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page , which then allows the attacker to spoof UI elements . The Chromium s...

CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106289

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93724

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106289

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106188

Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106188

Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106280

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93717

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106182

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the Paint component. A remote attacker can exploit this by using a crafted HTML page to spoof UI elements . This vulnerability is assigned CWE-451 and is classified with a Medium security severity b...

CVE-2026-106282

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw in the WebOTP component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements. No specific exploit details or in-the-wild exploitation instances are provided in the docume...

CVE-2026-106246

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the browser. This vulnerability allows a remote attacker to spoof the address bar by presenting a crafted HTML page to the user. The Chromium security severity for this issue is rated as Medium . No...

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106246

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106279

Google Chrome on iOS is vulnerable to an incorrect reference resolution in the Passwords component. This flaw allows a local attacker who has already compromised the renderer process to potentially achieve arbitrary code execution outside the sandbox via a local program. The vulnerability affects...

EUVD-2026-93708

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-106279

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-106406

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...