CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93621

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106285

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106296

Google Chrome on macOS versions prior to 155.0.8059.39 is vulnerable to improper privilege management within the UI. A remote attacker could use social engineering to trick a user into interacting with a crafted HTML page , which could then be used to bypass system access restrictions . The Chrom...

CVE-2026-106221

A confused deputy flaw was identified in the WebAPKs component of the Chromium browser, specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 . A remote attacker could exploit this by leveraging social engineering to serve a crafted HTML page , which allows for bypassing...

CVE-2026-106417

An integer overflow vulnerability in the Media component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to potentially execute arbitrary code outside the sandbox . This attack can be initiated via a crafted HTML page . No specific exploit details or in-the-wild exploitat...

CVE-2026-106259

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the PermissionElement component. A remote attacker can exploit this by serving a crafted HTML page to bypass system access restrictions. This vulnerability has been identified with a low security se...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106296

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Passwords component. A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the victim. While the Chromium security severity is classified as Low , t...

CVE-2026-106285

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation issue within the WebAppInstalls component. A remote attacker can use social engineering and a crafted HTML page to bypass system access restrictions. The impact is categorized as Low by Chromium security. Remed...

CVE-2026-106417

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106221

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106221

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106296

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106417

Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106285

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...