CVE-2026-106254

Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. Chromium security severity: Medium...

CVE-2026-106321

Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106386

Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106207

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93581

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93580

Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106210

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106386

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the WebAudio component. A remote attacker can exploit this by tricking a user into visiting a crafted HTML page, leading to information disclosure where the attacker can read process memory inside th...

CVE-2026-106207

A race condition (CWE-367) within the V8 engine in Google Chrome versions prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the sandbox. The attack can be initiated by delivering a crafted HTML page to the victim. While the Chromium security severity is labeled as M...

CVE-2026-106384

A missing authorization flaw exists in the SiteIsolation component of the Chromium browser, affecting Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can exploit this vulnerability to bypass site isolation using a crafted HTML pag...

CVE-2026-106351

A vulnerability in Google Chrome on iOS prior to version 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to obtain sensitive information . This is achieved by leveraging an observable discrepancy in Safebrowsing via a crafted HTML page. The issue is classif...

CVE-2026-106210

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy flaw within the Scroll component. A remote attacker can exploit this issue using a crafted Chrome extension to obtain cross-origin data . No specific exploit links or remediation versions are provided in the...

CVE-2026-106254

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information leak (CWE-200). This vulnerability allows a local attacker to obtain sensitive information through a co-installed application. Exploitation details and specific proof-of-concept links are not provided in the ...

CVE-2026-106321

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Editing component. A remote attacker can leverage social engineering to induce a user to visit a crafted HTML page , which can then be used to leak sensitive information . The Chromium security severity...

CVE-2026-106351

Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93765

Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106330

Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106352

Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106295

Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106352

Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...