109959 matches found
CVE-2026-106398
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106401
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106398
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106388
Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106395
Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106388
Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93759
Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93761
Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93758
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93763
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106304
Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106271
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-106304
Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93760
Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-106395
Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106304
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an out-of-bounds read flaw within the ANGLE component. A remote attacker can exploit this vulnerability by hosting a crafted HTML page , which allows them to read memory outside the sandbox. No specific details regarding exploit avai...
CVE-2026-106388
Google Chrome versions prior to 155.0.8059.39 are susceptible to a missing authorization vulnerability within the DataTransfer component. A remote attacker who has already compromised the renderer process can leverage this flaw to obtain sensitive information by hosting a crafted HTML page. The v...
CVE-2026-106401
Google Chrome contains an out-of-bounds write vulnerability in its Media component (prior to version 155.0.8059.39). A remote attacker can achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML page . This flaw could potentially comp...
CVE-2026-106395
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource issue within the Dawn component. A remote attacker could exploit this by hosting a crafted HTML page to read memory outside the sandbox . The vulnerability is assigned a Medium severity by Chromium...
CVE-2026-106271
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Workers . A remote attacker who has already compromised the renderer process can use a crafted PDF file to bypass site isolation . The vulnerability is rated with Medium severity by Chromium and has a ...