285590 matches found
CVE-2026-106246
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the browser. This vulnerability allows a remote attacker to spoof the address bar by presenting a crafted HTML page to the user. The Chromium security severity for this issue is rated as Medium . No...
CVE-2026-106282
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw in the WebOTP component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements. No specific exploit details or in-the-wild exploitation instances are provided in the docume...
EUVD-2026-93717
Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93708
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-106279
Google Chrome on iOS is vulnerable to an incorrect reference resolution in the Passwords component. This flaw allows a local attacker who has already compromised the renderer process to potentially achieve arbitrary code execution outside the sandbox via a local program. The vulnerability affects...
CVE-2026-106279
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
EUVD-2026-93703
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93704
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106406
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93698
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106244
Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106225
Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106225
Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106225
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially leading to the unauthorized disclosure of sensitive information ...
CVE-2026-106313
Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
CVE-2026-106313
A vulnerability in the Google Chrome browser on Android (versions prior to 155.0.8059.39 ) allows a local attacker to obtain sensitive information via a co-installed app. This is caused by an incorrect authorization mechanism that can be triggered by an attacker leveraging social engineering . No...
EUVD-2026-93672
Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
CVE-2026-106365
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within the Animation component. This vulnerability allows a remote attacker to bypass the web origin policy by hosting a crafted HTML page. No specific exploit details or in-the-wild exploitation informat...