114636 matches found
CVE-2026-106285
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation issue within the WebAppInstalls component. A remote attacker can use social engineering and a crafted HTML page to bypass system access restrictions. The impact is categorized as Low by Chromium security. Remed...
CVE-2026-106296
Google Chrome on macOS versions prior to 155.0.8059.39 is vulnerable to improper privilege management within the UI. A remote attacker could use social engineering to trick a user into interacting with a crafted HTML page , which could then be used to bypass system access restrictions . The Chrom...
CVE-2026-106417
An integer overflow vulnerability in the Media component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to potentially execute arbitrary code outside the sandbox . This attack can be initiated via a crafted HTML page . No specific exploit details or in-the-wild exploitat...
CVE-2026-106259
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the PermissionElement component. A remote attacker can exploit this by serving a crafted HTML page to bypass system access restrictions. This vulnerability has been identified with a low security se...
CVE-2026-106221
A confused deputy flaw was identified in the WebAPKs component of the Chromium browser, specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 . A remote attacker could exploit this by leveraging social engineering to serve a crafted HTML page , which allows for bypassing...
CVE-2026-106220
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Passwords component. A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the victim. While the Chromium security severity is classified as Low , t...
CVE-2026-106192
Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...
CVE-2026-106192
Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. Chromium security severity: Low...
CVE-2026-106422
Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106399
Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. Chromium security severity: Low...
CVE-2026-106247
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106264
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
EUVD-2026-93613
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93616
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106186
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...
CVE-2026-106264
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93612
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...