110681 matches found
CVE-2026-106222
Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106238
Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106208
Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106420
Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an incorrect calculation within an API. A remote attacker can leverage social engineering to deploy a crafted Chrome extension capable of spoofing UI elements . This vulnerability has been sighted in the wild. No specific e...
CVE-2026-106238
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition within the Fonts component. A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox using a crafted HTML page. The security ...
CVE-2026-106208
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in an API. A remote attacker can leverage social engineering to leak sensitive information by utilizing a crafted Chrome extension . This issue was addressed in the stable channel update, and specific rem...
CVE-2026-106324
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the WebAppInstalls component. A remote attacker can exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The vulnerability has a Medium security severity. Whi...
CVE-2026-106286
A confused deputy vulnerability in the Omnibox component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to bypass the web origin policy using crafted network traffic. This flaw has a Chromium security severity of Medium . Remediation is available in version 155.0.8059...
CVE-2026-106181
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect reference resolution in the DevTools component. A remote attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to obtain sensitive information . Exploitation details...
CVE-2026-106222
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Sync component. A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . The vulnerability is assigned a Medium security severity. No specific ...
CVE-2026-106181
Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106324
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106204
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...
CVE-2026-106349
Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106421
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106349
Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106383
Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-106204
Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...