CVE-2026-106182

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the Paint component. A remote attacker can exploit this by using a crafted HTML page to spoof UI elements . This vulnerability is assigned CWE-451 and is classified with a Medium security severity b...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106182

UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106392

An information leak in the WebAudio component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to potentially leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified as Medium severity by Chromium. No specific exploit details or manual re...

CVE-2026-106342

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Autofill component. A remote attacker can exploit this flaw by tricking a user into visiting a crafted HTML page to obtain sensitive information . The vulnerability is classified with a Chromium securit...

CVE-2026-106342

Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106261

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106198

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization issue in the FileSystem component. A remote attacker who has already compromised the renderer process can exploit this vulnerability by using a crafted HTML page to bypass the web origin policy . The Chromium ...

EUVD-2026-93696

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

A vulnerability in Google Chrome on iOS (prior to version 155.0.8059.39 ) was caused by improper input validation . A remote attacker could use social engineering to trick a user into visiting a crafted HTML page , potentially leading to the execution of arbitrary code outside the sandbox . While...

CVE-2026-106408

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106397

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106408

Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93692

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...