CVE-2026-106350

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the browser. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low , the CVSS 3.1 score is 8.8 (High)...

CVE-2026-106343

Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106368

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106380

UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106249

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the Autofill component. A remote attacker can exploit this flaw by using a crafted HTML page to obtain sensitive information . No specific exploit details or remediation steps are provided in ...

CVE-2026-106368

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The Chromium security severity for this issue is Low . No specific exploit details or remediation steps a...

CVE-2026-106179

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106368

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93618

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93621

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Passwords component. A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the victim. While the Chromium security severity is classified as Low , t...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106297

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93603

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization issue within the Selection component. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, the CVSS 3...

CVE-2026-106252

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect comparison in the Fonts component. This flaw could allow a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . No specific exploit details or mitigation workarounds a...