CVE-2026-106389

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106196

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Navigation component. A remote attacker can use a crafted HTML page to bypass web origin policy and access a privileged page . The Chromium security severity is rated as Medium . No specific ...

CVE-2026-106407

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. An attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions . No specific exploit details or in-the-wild ...

EUVD-2026-93694

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93693

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106389

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw involving USB access. A remote attacker using social engineering can bypass system access restrictions by utilizing a crafted Chrome extension . No specific exploit links or in-the-wild exploitation de...

CVE-2026-106397

Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to an incorrect authorization flaw (CWE-863). A remote attacker can leverage social engineering to bypass system access restrictions by tricking a user into visiting a crafted HTML page . The security severity is rated as Medium by...

CVE-2026-106397

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93692

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106244

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93689

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93691

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106224

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Google Lens . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to obtain cross-origin data . The Chromium security severity for this issu...

CVE-2026-106244

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106363

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process and utilized social engineering can bypass system access restrictions by serving a crafted HTML page. Th...

CVE-2026-106217

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within Google Lens . A remote attacker who has already compromised the renderer process can leverage this issue to leak cross-origin data by serving a crafted HTML page. This vulnerability carries a Chrom...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...