CVE-2026-106333

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106303

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106356

A clickjacking flaw exists in the EVP component of Google Chrome prior to version 155.0.8059.39 . A remote attacker can use social engineering and a crafted HTML page to spoof UI elements, potentially tricking users into performing unintended actions. The vulnerability is categorized with a Mediu...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

An information leak in the WebAudio component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to potentially leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. No specific exploit details or manual re...

CVE-2026-106182

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the Paint component. A remote attacker can exploit this by using a crafted HTML page to spoof UI elements . This vulnerability is assigned CWE-451 and is classified with a Medium security severity b...

CVE-2026-106182

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106342

Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106342

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Autofill component. A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page to obtain sensitive information . The vulnerability is classified with a Chromium securit...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106198

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization issue in the FileSystem component. A remote attacker who has already compromised the renderer process can exploit this vulnerability by using a crafted HTML page to bypass the web origin policy . The Chromium ...

CVE-2026-106407

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93696

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93692

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...