24903 matches found
CVE-2026-106220
Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106309
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106309
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization issue within the Selection component. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, the CVSS 3...
CVE-2026-106252
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect comparison in the Fonts component. This flaw could allow a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . No specific exploit details or mitigation workarounds a...
CVE-2026-106252
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106394
Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106250
A missing authorization vulnerability in the Actor component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering to trick a user into visiting a crafted HTML page . The Chr...
CVE-2026-106372
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106372
A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization in the UI. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . The vulnerability is categorized as having a Medium secur...
CVE-2026-106207
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106337
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106330
An information leak vulnerability exists in the Paint component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can leverage a crafted HTML page to leak sensitive information, which is classified as a Medium severity issue by Chromium. No specific exploits or in-the-wild explo...
CVE-2026-106337
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The vulnerability is associated with CWE-451 . No specific exploitation details or mitigation steps are p...
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in WebProtect . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing the attacker to obtain sensitive information . No specific expl...
CVE-2026-106398
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106375
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106375
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup flaw in the Dawn component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific exploit details or manual workarounds are ...
CVE-2026-106403
A vulnerability in the Accessibility component of Google Chrome (prior to version 155.0.8059.39 ) allows for a site isolation bypass . An attacker who has already compromised the renderer process can exploit this incorrect authorization (CWE-863) by using a crafted HTML page. The Chromium securit...