CVE-2026-106325

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106334

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106294

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106325

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106385

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106390

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106294

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93646

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106236

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the Chromoting component. A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. No specific exploit information or manual workarounds are prov...

CVE-2026-106339

A flaw in the Core component of Google Chrome (prior to version 155.0.8059.39 ) allows for a use of released resource condition. A remote attacker who has already compromised a browser renderer process can exploit this by enticing a user to visit a crafted HTML page . Successful exploitation enab...

CVE-2026-106195

Google Chrome on macOS (versions prior to 155.0.8059.39 ) is vulnerable to an incorrect authorization flaw in the Chromoting component. A remote attacker can exploit this by sending crafted network traffic to bypass system access restrictions. This vulnerability could potentially allow an attacke...

CVE-2026-106371

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization flaw within the Transactions Platform . A remote attacker could exploit this by hosting a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, ...

CVE-2026-106316

Google Chrome on Mac prior to version 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the Chromoting feature. A remote attacker can use social engineering and crafted network traffic to spoof UI elements . Exploitation details are not provided in the documents. Remediation is av...

CVE-2026-106413

A race condition in the browser component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to spoof UI elements using a crafted HTML page. This vulnerability is categorized with a Low security severity by Chromium. No specif...

CVE-2026-106256

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information leak within the Passwords component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page , which can then be used to obtain sensitive information. While Chromiu...

CVE-2026-106320

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use of Released Resource in UI (CWE-672). A remote attacker who has already compromised the renderer process can exploit this flaw to spoof UI elements by serving a crafted HTML page. This issue is classified as Low severity by Chr...

CVE-2026-106413

Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106339

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106256

Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...