110030 matches found
CVE-2026-106253
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106361
Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106402
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106279
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-106342
Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106424
Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106424
An information leak vulnerability in the Audio component of Google Chrome versions prior to 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox using a crafted Chrome extension . No specific exploit links or in-the-wild exploi...
CVE-2026-106342
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Autofill component. A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page to obtain sensitive information . The vulnerability is classified with a Chromium securit...
CVE-2026-106279
Google Chrome on iOS is vulnerable to an incorrect reference resolution in the Passwords component. This flaw allows a local attacker who has already compromised the renderer process to potentially achieve arbitrary code execution outside the sandbox via a local program. The vulnerability affects...
CVE-2026-106361
Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to an incorrect provision of specified functionality (CWE-684 ). A remote attacker could use social engineering and crafted network traffic to bypass the web origin policy . No specific exploits or in-the-wild exploitation details ...
CVE-2026-106253
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Extensions component. This vulnerability allows a remote attacker to obtain cross-origin data by utilizing a crafted Chrome extension. The issue has been addressed in version 155.0.8059.39 ....
CVE-2026-106402
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within its Extensions component. A remote attacker can leverage social engineering to install a crafted Chrome extension that allows them to spoof UI elements . Exploitation details and specific proof-...
CVE-2026-106342
Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93698
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93702
Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106378
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93699
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93701
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...