CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106180

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106201

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93724

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-93730

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106180

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106206

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-93725

Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93729

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93727

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106303

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93726

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106180

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in Animation (CWE-203). A remote attacker can exploit this flaw by hosting a crafted HTML page to potentially obtain cross-origin data . While no specific exploit code or manual is provided, the vulnerabilit...

CVE-2026-106289

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in FedCM . This issue allows a remote attacker to bypass the web origin policy by providing a crafted HTML page. The vulnerability has been reported in the wild as of October 2026. Exploitation details or...

CVE-2026-106201

A race condition vulnerability exists in the V8 engine within Google Chrome versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by presenting a crafted HTML page . The vulnerability is classified with a High base severity (CVSS 3.1 sco...

CVE-2026-106333

A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization within the Input component. A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page , which then allows the attacker to spoof UI elements . The Chromium s...

CVE-2026-106303

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in the Autofill AI component. A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to obtain sensitive information. No specific exploit detail...

CVE-2026-106201

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...