CVE-2026-106253

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Extensions component. This vulnerability allows a remote attacker to obtain cross-origin data by utilizing a crafted Chrome extension. The issue has been addressed in version 155.0.8059.39 ....

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93707

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

A flaw in the Extensions subsystem of Google Chrome (and chromium-browser ) prior to version 155.0.8059.39 allows for improper resource exposure. A remote attacker can exploit this by convincing a user to view a crafted HTML page , which enables them to obtain cross-origin data (information belon...

EUVD-2026-93704

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93689

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Google Lens . A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to obtain cross-origin data . The Chromium security severity for this issu...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within Google Lens . A remote attacker who has already compromised the renderer process can leverage this issue to leak cross-origin data by serving a crafted HTML page. This vulnerability carries a Chrom...

EUVD-2026-93681

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106184

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93845

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106184

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource issue within the Media component. This flaw allows a remote attacker to obtain cross-origin data by navigating the victim to a crafted HTML page. This issue was assigned a high security severity by Chromium....

CVE-2026-106379

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93828

Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106379

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a high-severity security flaw involving an uninitialized resource in Skia . This vulnerability could allow a remote attacker to obtain cross-origin data by enticing a user to visit a crafted HTML page. The issue has been addressed in...

EUVD-2026-93821

Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106332

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an integer overflow within the Compositing component. This flaw allows a remote attacker to bypass security boundaries and obtain cross-origin data by tricking a user into visiting a crafted HTML page. The vulnerability has been addr...