110673 matches found
CVE-2026-106222
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106222
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106324
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93855
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93856
Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
EUVD-2026-93857
Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106286
Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
EUVD-2026-93858
Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106181
Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106208
Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106222
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106181
Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106286
Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106238
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106324
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106420
Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an incorrect calculation within an API. A remote attacker can leverage social engineering to deploy a crafted Chrome extension capable of spoofing UI elements . This vulnerability has been sighted in the wild. No specific e...
CVE-2026-106238
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition within the Fonts component. A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox using a crafted HTML page. The security ...
CVE-2026-106208
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in an API. A remote attacker can leverage social engineering to leak sensitive information by utilizing a crafted Chrome extension . This issue was addressed in the stable channel update, and specific rem...
CVE-2026-106324
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the WebAppInstalls component. A remote attacker can exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The vulnerability has a Medium security severity. Whi...
CVE-2026-106286
A confused deputy vulnerability in the Omnibox component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to bypass the web origin policy using crafted network traffic. This flaw has a Chromium security severity of Medium . Remediation is available in version 155.0.8059...