CVE-2026-106283

Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106291

A use after free vulnerability exists in the GarbageCollection component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can exploit this flaw by navigating the user to a crafted HTML page to achieve arbitrary code execution within the sandbox. Remediation is available in vers...

CVE-2026-106283

A Use after free vulnerability exists in the Streaming component of Google Chrome versions prior to 155.0.8059.39 . A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing for the execution of arbitrary code within the sandbox. N...

CVE-2026-106241

Google Chrome on Android versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Search functionality. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , which may allow for the execution of arbitrary code out...

EUVD-2026-93859

Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106315

Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106315

Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93671

Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106194

Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106315

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw within the Modularization component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by visiting a crafted HTML page. Remediation is available in version 155.0.8059.39 or...

CVE-2026-106194

A missing authorization vulnerability in WebAppInstalls affects Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process and used social engineering can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93852

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106238

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition within the Fonts component. A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox using a crafted HTML page. The security ...

CVE-2026-106349

Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93847

Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106421

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106200

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106204

Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...