EUVD-2026-93725

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106180

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in Animation (CWE-203). A remote attacker can exploit this flaw by hosting a crafted HTML page to potentially obtain cross-origin data . While no specific exploit code or manual is provided, the vulnerabilit...

CVE-2026-106180

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93717

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

An information leak in the WebAudio component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to potentially leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. No specific exploit details or manual re...

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106253

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Extensions component. This vulnerability allows a remote attacker to obtain cross-origin data by utilizing a crafted Chrome extension. The issue has been addressed in version 155.0.8059.39 ....

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93707

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106354

A flaw in the Extensions subsystem of Google Chrome (and chromium-browser ) prior to version 155.0.8059.39 allows for improper resource exposure. A remote attacker can exploit this by convincing a user to view a crafted HTML page , which enables them to obtain cross-origin data (information belon...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93704

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93689

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Google Lens . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to obtain cross-origin data . The Chromium security severity for this issu...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...