CVE-2026-106297

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106299

Google Chrome versions prior to 155.0.8059.39 are affected by an improper input validation flaw in the WebAudio component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. This vulnerability is rated as Low severi...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106394

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a cross-origin data leak due to an incomplete cleanup in the Glic component. A remote attacker can exploit this by leveraging social engineering to lure a user to a crafted HTML page . The vulnerability is categorized as having a low...

CVE-2026-106309

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization issue within the Selection component. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, the CVSS 3...

CVE-2026-106252

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect comparison in the Fonts component. This flaw could allow a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . No specific exploit details or mitigation workarounds a...

CVE-2026-106427

Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a confused deputy issue. A remote attacker can bypass system access restrictions to reach a privileged page by using a crafted HTML page . The Chromium security severity for this issue is rated as Low .

CVE-2026-106306

A vulnerability in Google Chrome prior to version 155.0.8059.39 allows a local attacker to bypass system access restrictions. The issue is caused by incorrect authorization within the DevTools component, which can be triggered by a crafted HTML page . This vulnerability is classified with a Low s...

EUVD-2026-93603

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106394

Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93599

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93602

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93598

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93601

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106394

Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...