110678 matches found
CVE-2026-106389
Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106397
Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106407
Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106408
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106414
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106196
Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106196
Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106408
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106397
Google Chrome on iOS is vulnerable to an incorrect authorization flaw in versions prior to 155.0.8059.39 . A remote attacker can leverage social engineering to bypass system access restrictions using a crafted HTML page . The Chromium security severity is rated as Medium . No specific exploit cod...
CVE-2026-106196
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Navigation component. A remote attacker can exploit this by using a crafted HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The vulnerability is ...
CVE-2026-106414
A vulnerability in Google Chrome on iOS (prior to version 155.0.8059.39 ) was caused by improper input validation . A remote attacker could use social engineering to trick a user into visiting a crafted HTML page , potentially leading to the execution of arbitrary code outside the sandbox . While...
CVE-2026-106408
A protection mechanism failure in the Mobile component of Google Chrome on iOS (prior to version 155.0.8059.39 ) allows a remote attacker to bypass web origin policy policies by visiting a crafted HTML page. This vulnerability is classified as Medium severity by Chromium. Exploitation details are...
CVE-2026-106389
Google Chrome versions prior to 155.0.8059.39 are vulnerable to incorrect authorization within the USB component. A remote attacker can leverage social engineering and a crafted Chrome extension to bypass system access restrictions. The vulnerability has a Chromium security severity of Medium . R...
CVE-2026-106407
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to bypass system access restrictions. The Chromium securit...
CVE-2026-106414
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106397
Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106407
Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106389
Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-93687
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...