CVE-2026-110137

Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110137

Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110146

Google Chrome is affected by an information leak flaw in the Passwords component. A remote attacker can leverage social engineering to obtain sensitive information by navigating the user to a crafted HTML page . This vulnerability impacts versions prior to 155.0.8059.79 . Remediation is available...

CVE-2026-110150

A privilege elevation flaw exists in the Installer component of Google Chrome on Windows versions prior to 155.0.8059.79 . This vulnerability allows a local attacker to obtain sensitive information by executing a local program. The issue has a High security severity in Chromium. Remediation is av...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-110162

Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110143

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110143

A use of uninitialized variable flaw in the ThirdParty lmza_sdk component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to potentially read memory inside the sandbox by providing a crafted file. The vulnerability was reported by Google and is addressed in the stable ...

CVE-2026-110170

A Use after free vulnerability in the Bindings component of Google Chrome prior to version 155.0.8059.79 allows a remote attacker to read memory inside the sandbox by navigating to a crafted HTML page. This flaw was reported by Google and is part of a broader set of security fixes in the stable c...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-110143

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-110162

Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110160

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. Chromium security severity: High...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110162

Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110170

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110143

Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. Chromium security severity: High...

CVE-2026-110162

A use after free vulnerability in the Desktop component of Google Chrome (prior to version 155.0.8059.79 ) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by visiting a crafted HTML page . The issue was reported by Findingz and is addressed in the stab...