CVE-2026-106296

Google Chrome on macOS versions prior to 155.0.8059.39 is vulnerable to improper privilege management within the UI. A remote attacker could use social engineering to trick a user into interacting with a crafted HTML page , which could then be used to bypass system access restrictions . The Chrom...

EUVD-2026-93621

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106296

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106285

UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106220

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106259

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the PermissionElement component. A remote attacker can exploit this by serving a crafted HTML page to bypass system access restrictions. This vulnerability has been identified with a low security se...

EUVD-2026-93618

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106199

Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106275

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93608

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106275

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an information disclosure flaw. The root cause is an uninitialized resource within the Graphics Processing Unit (GPU) component. A remote attacker can exploit this by tricking a user into opening a crafted HTML page , which...

CVE-2026-106297

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization issue within the Selection component. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, the CVSS 3...

CVE-2026-106252

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect comparison in the Fonts component. This flaw could allow a remote attacker to potentially execute arbitrary code inside the sandbox by hosting a crafted HTML page . No specific exploit details or mitigation workarounds a...

CVE-2026-106252

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106252

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106309

Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93603

Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...