CVE-2026-106292

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93757

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106212

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93755

Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106212

Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106262

Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106307

Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106292

Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106375

Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106212

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, which can then be used to obtain sensitive information . Exploitation det...

CVE-2026-106292

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a heap-based buffer overflow within the Fonts component. A remote attacker who has already compromised the renderer process can exploit this vulnerability to potentially execute arbitrary code outside the sandbox by hosting a crafted...

CVE-2026-106375

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup flaw in the Dawn component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific exploit details or manual workarounds are ...

CVE-2026-106348

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Animation component. A remote attacker can exploit this flaw by utilizing a crafted HTML page to leak sensitive information from the victim's browser. This vulnerability is classified with a Medium secu...

CVE-2026-106262

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup issue within the GetUserMedia function. A remote attacker who has already compromised the renderer process can leverage social engineering to spoof UI elements using a crafted HTML page. No specific exploit info...

CVE-2026-106307

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Network component. A remote attacker who has already compromised the renderer process can exploit this issue to bypass system access restrictions by leveraging a crafted HTML page . The vuln...

CVE-2026-106360

An information leak vulnerability exists in Payments within Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this flaw by using a crafted HTML page to obtain cross-origin data . This issue has been assigned a Medium security severity by Chromium. Remediation is availa...

CVE-2026-106232

UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106229

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...