110030 matches found
EUVD-2026-93700
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106326
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...
CVE-2026-106290
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106406
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106326
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...
CVE-2026-106378
Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106406
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106261
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106290
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106354
Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106198
Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106326
Google Chrome on Android prior to version 155.0.8059.39 is vulnerable to a confused deputy flaw in its UI. A local attacker can leverage a malicious co-installed application to trick the browser into misusing its higher authority, allowing the attacker to bypass system access restrictions and gai...
CVE-2026-106290
A vulnerability exists in the GPU component of the Chromium browser , specifically affecting Google Chrome on Android versions prior to 155.0.8059.39 . The root cause is an uninitialized resource flaw, which could allow a remote attacker who has already compromised the renderer process to read me...
CVE-2026-106261
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a medium-severity issue involving an uninitialized resource in Video . This flaw allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page. While specific exploit details are not provided, the vu...
CVE-2026-106354
A flaw in the Extensions subsystem of Google Chrome (and chromium-browser ) prior to version 155.0.8059.39 allows for improper resource exposure. A remote attacker can exploit this by convincing a user to view a crafted HTML page , which enables them to obtain cross-origin data (information belon...
CVE-2026-106378
Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to a privilege elevation flaw within the Sandbox . A remote attacker who has already compromised the renderer process can utilize a crafted HTML page to execute arbitrary code outside the sandbox. The vulnerability is associated w...
CVE-2026-106198
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization issue in the FileSystem component. A remote attacker who has already compromised the renderer process can exploit this vulnerability by using a crafted HTML page to bypass the web origin policy . The Chromium ...
CVE-2026-106406
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw (CWE-862). This issue allows a remote attacker to use social engineering to deliver a crafted HTML page that spoofs UI elements . Exploitation of this vulnerability is reported in the wild. No speci...
EUVD-2026-93703
Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...