25556 matches found
CVE-2026-106394
Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106309
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106250
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Actor component. A remote attacker could leverage social engineering to bypass system access restrictions by tricking a user into visiting a crafted HTML page . This issue has been addressed in the...
CVE-2026-106250
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93585
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106372
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106338
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106372
A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization in the UI. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . The vulnerability is categorized as having a Medium secur...
CVE-2026-106386
Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106321
Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106207
Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93767
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93764
Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106404
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in WebProtect . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing the attacker to obtain sensitive information . No specific expl...
CVE-2026-106330
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Paint component. A remote attacker can exploit this vulnerability by utilizing a crafted HTML page to leak sensitive information from the user's system. The vulnerability has been addressed in version 1...
CVE-2026-106337
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The vulnerability is associated with CWE-451 . No specific exploitation details or mitigation steps are p...
CVE-2026-106337
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...