114698 matches found
CVE-2026-106210
Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106321
Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106254
Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...
CVE-2026-106386
Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106384
Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106351
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93580
Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106207
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106321
Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106351
Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106207
A race condition (CWE-367) within the V8 engine in Google Chrome versions prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by delivering a crafted HTML page to the victim. While the Chromium security severity is labeled as M...
CVE-2026-106384
A missing authorization flaw exists in the SiteIsolation component of the Chromium browser, affecting Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can exploit this vulnerability to bypass site isolation using a crafted HTML pag...
CVE-2026-106254
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information leak (CWE-200). This vulnerability allows a local attacker to obtain sensitive information through a co-installed application. Exploitation details and specific proof-of-concept links are not provided in the ...
CVE-2026-106321
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Editing component. A remote attacker can leverage social engineering to induce a user to visit a crafted HTML page , which can then be used to leak sensitive information . The Chromium security severity...
CVE-2026-106210
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy flaw within the Scroll component. A remote attacker can exploit this issue using a crafted Chrome extension to obtain cross-origin data . No specific exploit links or remediation versions are provided in the...
CVE-2026-106351
A vulnerability in Google Chrome on iOS prior to version 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to obtain sensitive information . This is achieved by leveraging an observable discrepancy in Safebrowsing via a crafted HTML page. The issue is classif...
CVE-2026-106386
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the WebAudio component. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page, leading to information disclosure where the attacker can read process memory inside th...
CVE-2026-106386
Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93765
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...