109871 matches found
CVE-2026-106384
A missing authorization vulnerability in SiteIsolation within Google Chrome prior to version 155.0.8059.39 allows a remote attacker to bypass site isolation. If an attacker successfully compromises the renderer process , they can use a crafted HTML page to execute this bypass. The Chromium securi...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106404
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106404
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106295
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93577
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93765
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106295
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106404
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93766
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106404
Google Chrome versions prior to 155.0.8059.39 are affected by an incorrect authorization vulnerability in FontAccess . A remote attacker who has already compromised the renderer process can exploit this flaw to bypass system access restrictions by navigating to a crafted HTML page. This issue is ...
CVE-2026-106295
Google Chrome versions prior to 155.0.8059.39 are vulnerable to incorrect authorization within the Unbounded Element component. This flaw allows a remote attacker who has already compromised the renderer process to spoof UI elements using a crafted HTML page. This issue has been identified as a M...
CVE-2026-106183
Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in Chromoting . A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . Exploitation details are not provided in the documents.
CVE-2026-106398
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106388
Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106271
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...