CVE-2026-106301

A flaw was found in the Contextual Tasks component of chromium-browser. This flaw allows a remote attacker who has already compromised the renderer process to bypass access restrictions into privileged browser pages. By convincing a user to open a crafted HTML page, the attacker exploits a confus...

DEBIAN-CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106266

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

A confused deputy vulnerability in the Contextual Tasks component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to bypass system access restrictions. If an attacker successfully compromises the renderer process , they can use a crafted HTML page to gain access to a priv...

EUVD-2026-93750

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106266

A confused deputy vulnerability exists in Contextual Tasks within Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass the web origin policy and access a privileged page . No specific exploit links...

EUVD-2026-93685

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106266

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-103624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-103624

A flaw was found in chromium-browser. A remote attacker who has already compromised the renderer process could exploit a use-after-free vulnerability accessing memory after it has been freed in the Contextual Tasks component by convincing a user to visit a crafted HTML page. Successful exploitati...

DEBIAN-CVE-2026-103624

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103624

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103624

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-91711

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103624

A use-after-free vulnerability exists in the Contextual Tasks component of Google Chrome on Windows versions prior to 154.0.8037.97 . A remote attacker who has already compromised the renderer process can exploit this flaw by convincing a user to visit a crafted HTML page . Successful exploitatio...

CVE-2026-103624

Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome < 154.0.8037.97 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 154.0.8037.97. It is, therefore, affected by multiple vulnerabilities as referenced in the 202610stable-channel-update-for-desktop advisory. - Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a...

PT-2026-104384

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.97 Description A use after free issue exists in Contextual Tasks on Windows. This occurs when a remote attacker, having already compromised the renderer process, uses a specially crafted HTML page to...