110018 matches found
CVE-2026-106188
Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93718
Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93723
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93720
Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106188
Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93721
Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. Chromium security severity: Medium...
CVE-2026-106280
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the PermissionElement component. This vulnerability allows a remote attacker to potentially bypass the web origin policy by navigating to a crafted HTML page . The flaw is assigned a Medium secu...
CVE-2026-106370
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a use of uninitialized resource in the GPU component. A remote attacker who has already compromised the renderer process can exploit this flaw to read memory outside the sandbox by viewing a crafted HTML page. This vulnerab...
CVE-2026-106356
A clickjacking flaw exists in the EVP component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can use social engineering and a crafted HTML page to spoof UI elements, potentially tricking users into performing unintended actions. The vulnerability is categorized with a Mediu...
CVE-2026-106405
A race condition flaw exists in the CustomTabs component of the Chromium browser (specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 ). This vulnerability allows a local attacker to bypass the web origin policy by leveraging a co-installed app . The root causes are do...
CVE-2026-106188
Google Chrome on Android is affected by a confused deputy vulnerability in the SignIn component. A remote attacker can bypass system access restrictions to reach a privileged page by hosting a crafted HTML page . This issue affects versions prior to 155.0.8059.39 . While the Chromium security sev...
CVE-2026-106322
An open redirect vulnerability exists in the AppManifest component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can leverage social engineering to craft an HTML page that bypasses the web origin policy . The Chromium security severity for this issue is Medium . While specif...
CVE-2026-106282
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93716
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106282
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106282
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106302
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106416
Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...