CVE-2026-106389

An incorrect authorization flaw was found in the USB component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503625361...

CVE-2026-106363

A missing authorization flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501896592...

CVE-2026-106335

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502105238...

CVE-2026-106314

An incorrect authorization flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501533684...

CVE-2026-106274

An incorrect reference resolution flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/497842821...

CVE-2026-106261

An uninitialized resource flaw was found in the Video component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504638005...

CVE-2026-106241

An incorrect authorization flaw was found in the Search component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501729675...

CVE-2026-106223

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501633302...

CVE-2026-108159

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

CVE-2026-106420

An incorrect calculation flaw was found in the API component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/477327257...

CVE-2026-106265

An ui misrepresentation flaw was found in the File component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/380789337...

CVE-2026-106222

An incorrect authorization flaw was found in the Sync component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/496623893...

CVE-2026-106421

An use after free flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567873463...

CVE-2026-106383

An use after free flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567447106...

CVE-2026-106278

An use after free flaw was found in the Select component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565774991...

CVE-2026-106257

An use after free flaw was found in the HTML component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/565674529...

CVE-2026-106204

An use after free flaw was found in the PDF component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567910530...

CVE-2026-108159 AstronRPA through 1.1.6 RCE via Smart-Component Chat XSS and IPC Bridge

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...

CVE-2026-108159

AstronRPA versions through 1.1.6 are vulnerable to Remote Code Execution (RCE) due to a cross-site scripting (XSS) flaw in the desktop client's smart-component chat . The root cause is the rendering of unsanitized LLM output via v-html . An attacker can use prompt-injection on a webpage to force ...

EUVD-2026-95907

AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing unsanitized LLM output rendered via v-html. Attackers can embed prompt-injection content in a web page so the model emi...