CVE-2026-106249

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the Autofill component. A remote attacker can exploit this flaw by using a crafted HTML page to obtain sensitive information . No specific exploit details or remediation steps are provided in ...

CVE-2026-106368

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The Chromium security severity for this issue is Low . No specific exploit details or remediation steps a...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93618

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106285

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106296

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93621

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the PermissionElement component. A remote attacker can exploit this by serving a crafted HTML page to bypass system access restrictions. This vulnerability has been identified with a low security se...

CVE-2026-106220

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Passwords component. A remote attacker can exploit this flaw by hosting a crafted HTML page to obtain sensitive information from the victim. While the Chromium security severity is classified as Low , t...

CVE-2026-106296

Google Chrome on macOS versions prior to 155.0.8059.39 is vulnerable to improper privilege management within the UI. A remote attacker could use social engineering to trick a user into interacting with a crafted HTML page , which could then be used to bypass system access restrictions . The Chrom...

CVE-2026-106275

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93608

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106275

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information disclosure flaw. The root cause is an uninitialized resource within the Graphics Processing Unit (GPU) component. A remote attacker can exploit this by tricking a user into opening a crafted HTML page , which...

CVE-2026-106394

Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106252

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...