110158 matches found
CVE-2026-106225
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Autofill component. A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially leading to the unauthorized disclosure of sensitive information ...
CVE-2026-106217
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within Google Lens . A remote attacker who has already compromised the renderer process can leverage this issue to leak cross-origin data by serving a crafted HTML page. This vulnerability carries a Chrom...
CVE-2026-106266
A confused deputy flaw exists in the Contextual Tasks component of the Chromium browser (Google Chrome) prior to version 155.0.8059.39 . This vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy and access a privileged page using ...
CVE-2026-106381
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization flaw within the Passwords component. A remote attacker could exploit this by leveraging a crafted HTML page to bypass the web origin policy . The Chromium security severity for this issue is Medium . ...
CVE-2026-106363
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process can leverage social engineering and a crafted HTML page to bypass system access restrictions. This vulne...
CVE-2026-106425
Google Chrome versions prior to 155.0.8059.39 are affected by a missing authorization flaw in the BrowserTag component. A remote attacker who has already compromised the renderer process and used social engineering can exploit this to bypass site isolation using a crafted HTML page. The vulnerabi...
CVE-2026-106300
Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93676
Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93677
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93678
Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93679
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106241
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106283
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106291
Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93673
Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93674
Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93675
Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106300
Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106241
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...