CVE-2026-106251

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106345

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106251

Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in Chromoting . A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. This issue is categorized as a Low security severity by Chromium. No specific explo...

CVE-2026-106345

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource flaw within the Session component . This vulnerability allows a remote attacker, who has already compromised the renderer process , to spoof UI elements by serving a crafted HTML page. The impact is categor...

CVE-2026-106269

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in its Media component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to obtain sensitive information . The Chromium security severity for this i...

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106269

A Use after free vulnerability exists in the CSS component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . While the Chromium security severity is listed as Low, the CVSS 3.1 s...

CVE-2026-106251

UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106269

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93655

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93643

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93647

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106325

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect reference resolution flaw within the Core component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, which can then be used to leak cross-origin data . Exploitation de...

CVE-2026-106236

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the Chromoting component. A remote attacker can leverage social engineering and crafted network traffic to spoof UI elements. No specific exploit information or manual workarounds are prov...

CVE-2026-106390

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106385

Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. Chromium security severity: Low...