CVE-2026-110146: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to inadequate flow management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to the improper implementation of security features at the client-side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to the exposure of information due to inconsistencies in their implementations. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers relates to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Downloads Component Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to the exposure of information due to incompatibility. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially crafted HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially crafted HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browsers stems from the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to gain access to protected information through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially crafted HTML page...