109962 matches found
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106295
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106352
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106404
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106263
Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106337
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93577
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93767
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93768
Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106183
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93764
Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93766
Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106330
Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106295
Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106337
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The vulnerability is associated with CWE-451 . No specific exploitation details or mitigation steps are p...
CVE-2026-106263
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity security issue. The flaw stems from improper input validation within the SignIn component, which could allow a remote attacker to bypass system access restrictions. This attack requires the use of social engineering...
CVE-2026-106352
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in WebProtect . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing the attacker to obtain sensitive information . No specific expl...
CVE-2026-106330
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Paint component. A remote attacker can exploit this vulnerability by utilizing a crafted HTML page to leak sensitive information from the user's system. The vulnerability has been addressed in version 1...
CVE-2026-106183
Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in Chromoting . A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . Exploitation details are not provided in the documents.
CVE-2026-106404
Google Chrome versions prior to 155.0.8059.39 are affected by an incorrect authorization vulnerability in FontAccess . A remote attacker who has already compromised the renderer process can exploit this flaw to bypass system access restrictions by navigating to a crafted HTML page. This issue is ...