302312 matches found
EUVD-2026-93698
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93704
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93703
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...
CVE-2026-106406
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106244
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the permissions subsystem . This vulnerability allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic . Successful exploitation can result in unaut...
CVE-2026-106225
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially leading to the unauthorized disclosure of sensitive information ...
CVE-2026-106225
Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106225
Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106365
A missing authorization flaw in the Animation component of the Chromium browser (Google Chrome) allows a remote attacker to bypass web origin policy via a crafted HTML page. This vulnerability affects versions prior to 155.0.8059.39 . No specific exploit details or remediation steps are provided ...
CVE-2026-106313
A vulnerability in the Google Chrome browser on Android (versions prior to 155.0.8059.39 ) allows a local attacker to obtain sensitive information via a co-installed app. This is caused by an incorrect authorization mechanism that can be triggered by an attacker leveraging social engineering . No...
CVE-2026-106313
Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
EUVD-2026-93672
Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
CVE-2026-106222
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Sync component. A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . The vulnerability is assigned a Medium security severity. No specific ...
EUVD-2026-93854
Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106324
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93855
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106265
UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106184
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource issue within the Media component. This flaw allows a remote attacker to obtain cross-origin data by navigating the victim to a crafted HTML page. This issue was assigned a high security severity by Chromium....