CVE-2026-106324

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the WebAppInstalls component. A remote attacker can exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The vulnerability has a Medium security severity. Whi...

CVE-2026-106265

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the File component. A remote attacker can leverage social engineering to spoof UI elements by tricking a user into visiting a crafted HTML page . The risk is classified as Medium severity, and the v...

EUVD-2026-93851

UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106357

Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106346

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a High severity issue involving improper state validation within DevTools . A remote attacker can leverage this flaw to potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit informa...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106184

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106278

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106318

A Use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Information regarding specific exploit availability is not provided...

CVE-2026-106257

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw in the HTML component. A remote attacker could exploit this by providing a crafted HTML page to execute arbitrary code inside the sandbox. Remediation is available in version 155.0.8059.39 and later. Specific de...

CVE-2026-106257

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106257

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93833

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106257

Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106329

Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106203

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93819

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93824

Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106193

A use after free vulnerability exists in the Parser component of Google Chrome versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Exploitation details are not provided in the documentation.