CVE-2026-106391

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106232

UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106336

Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106373

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106229

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the FileSystem component. This issue allows a remote attacker to bypass system access restrictions by leveraging social engineering through a crafted HTML page . The vulnerability is classified with...

CVE-2026-106336

An observable discrepancy in the Paint component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified with a Medium security severity. Remediation is available in version 155.0.8059.39 an...

CVE-2026-106391

Google Chrome on Android, specifically the WebShare component in versions prior to 155.0.8059.39 , contains an incorrect authorization flaw. A remote attacker who has already compromised the renderer process can exploit this vulnerability to spoof user interface (UI) elements via a crafted HTML p...

CVE-2026-106232

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw. A remote attacker can leverage social engineering to spoof browser UI elements by tricking a user into visiting a crafted HTML page . The vulnerability is associated with CWE-451 and has been addressed in...

CVE-2026-106301

A confused deputy vulnerability exists in the Contextual Tasks component of Google Chrome (prior to version 155.0.8059.39 ). An attacker who has already compromised the renderer process can exploit this flaw by convincing a user to open a crafted HTML page. This allows the attacker to bypass syst...

CVE-2026-106403

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Accessibility component. This vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation using a crafted HTML page. The Chromium security ...

CVE-2026-106373

A use after free vulnerability exists in the Fonts component of Google Chrome on Windows in versions prior to 155.0.8059.39 . A remote attacker can exploit this flaw by viewing a crafted HTML page to achieve arbitrary code execution within the sandbox. Exploitation details are not provided in the...

CVE-2026-106367

Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...

CVE-2026-106400

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106400

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93740

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106205

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106205

Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...