CVE-2026-106409

Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106340

Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...

EUVD-2026-93586

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106340

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by a missing authorization vulnerability in the CredentialProvider component. This flaw allows a local attacker to obtain sensitive information through physical access. While the Chromium security severity is listed as Low , the...

EUVD-2026-93583

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106207

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93768

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106352

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in WebProtect . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing the attacker to obtain sensitive information . No specific expl...

CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106304

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an out-of-bounds read flaw within the ANGLE component. A remote attacker can exploit this vulnerability by hosting a crafted HTML page , which allows them to read memory outside the sandbox. No specific details regarding exploit avai...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93757

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106212

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106212

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106360

An information leak vulnerability exists in Payments within Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this flaw by using a crafted HTML page to obtain cross-origin data . This issue has been assigned a Medium security severity by Chromium. Remediation is availa...

EUVD-2026-93748

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106328

Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106333

A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization within the Input component. A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page , which then allows the attacker to spoof UI elements . The Chromium s...

CVE-2026-106180

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in Animation (CWE-203). A remote attacker can exploit this flaw by hosting a crafted HTML page to potentially obtain cross-origin data . While no specific exploit code or manual is provided, the vulnerabilit...

CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...