CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106234

Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106272

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106345

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106234

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw in the Network component. This vulnerability could allow a remote attacker to potentially execute arbitrary code outside the sandbox by leveraging social engineering to interact with a crafted Chrome extension ....

CVE-2026-106310

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource within the FontAccess component. A remote attacker who has already compromised the renderer process can exploit this issue to bypass web origin policy by serving a crafted HTML page. The vulnerability is cl...

CVE-2026-106345

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource flaw within the Session component . This vulnerability allows a remote attacker, who has already compromised the renderer process , to spoof UI elements by serving a crafted HTML page. The impact is categor...

CVE-2026-106355

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in its Media component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to obtain sensitive information . The Chromium security severity for this i...

CVE-2026-106272

Google Chrome on Windows prior to version 155.0.8059.39 is vulnerable to a UI misrepresentation flaw in Chromoting . A remote attacker leveraging social engineering can use crafted network traffic to potentially spoof UI elements . The Chromium security severity for this issue is Low . No specifi...

EUVD-2026-93646

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106236

UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...

CVE-2026-106325

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106294

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

CVE-2026-106294

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93645

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106390

Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106385

A race condition vulnerability exists in the Chromoting component of Google Chrome (versions prior to 155.0.8059.39 ). A remote attacker could potentially bypass system access restrictions by using crafted network traffic combined with social engineering . This issue was addressed in the Chromium...

CVE-2026-106294

A remote attacker can bypass system access restrictions by sending crafted network traffic to Google Chrome on Mac running versions prior to 155.0.8059.39 . The vulnerability is caused by an incomplete cleanup flaw within the Chromoting component. While Chromium classifies the severity as low, CV...

CVE-2026-106334

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...