EUVD-2026-93672

Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106365

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within the Animation component. This vulnerability allows a remote attacker to bypass the web origin policy by hosting a crafted HTML page. No specific exploit details or in-the-wild exploitation informat...

EUVD-2026-93855

Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-93854

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106222

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Sync component. A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . The vulnerability is assigned a Medium security severity. No specific ...

CVE-2026-106265

UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106184

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106184

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource issue within the Media component. This flaw allows a remote attacker to obtain cross-origin data by navigating the victim to a crafted HTML page. This issue was assigned a high security severity by Chromium....

CVE-2026-106379

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a high-severity security flaw involving an uninitialized resource in Skia . This vulnerability could allow a remote attacker to obtain cross-origin data by enticing a user to visit a crafted HTML page. The issue has been addressed in...

EUVD-2026-93820

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106332

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an integer overflow within the Compositing component. This flaw allows a remote attacker to bypass security boundaries and obtain cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability has been addr...

CVE-2026-106203

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106202

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106308

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a High severity security issue caused by an incorrect reference resolution in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , which can then be u...

CVE-2026-106245

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a high-severity security issue caused by an uninitialized resource in the ANGLE component. A remote attacker can exploit this vulnerability by using a crafted HTML page to obtain cross-origin data . Remediation is available in versio...

CVE-2026-106245

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93798

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

pentest-a2p2v-core

LISEZ-MOI Automated Attack Path Planning and Validation A2P2V est un outil de planification et de cyberattaque qui offre aux utilisateurs la capacité de déterminer un ensemble de séquences d'attaque classées en fonction d'un objectif spécifique de l'attaquant. Le but de l'outil est de simplifier ...

CVE-2026-55307

A logic error in the kdn_set_sysregs_prot function within the hwcrypto-kdn.c file can lead to a local information disclosure . Exploitation of this vulnerability requires System execution privileges , and no user interaction is required. While the technical impact is classified as partial, the co...

CVE-2026-105485

The Devolutions Server (version 2026.3.7.0 and earlier) is susceptible to an authentication bypass within the OAuth device authorization flow . A remote attacker can achieve full account takeover of an authenticated victim by replaying a captured device verification link . The vulnerability is ca...