CVE-2026-106340

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by a missing authorization vulnerability in the CredentialProvider component. This flaw allows a local attacker to obtain sensitive information through physical access. While the Chromium security severity is listed as Low , the...

CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106183

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in Chromoting . A remote attacker can exploit this by sending crafted network traffic to obtain sensitive information . Exploitation details are not provided in the documents.

EUVD-2026-93577

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106183

Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...

CVE-2026-106367

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to missing authorization (CWE-862). A local attacker using social engineering could potentially execute arbitrary code outside the sandbox through a co-installed application. No specific exploit details or information regardin...

CVE-2026-106387

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106406

A missing authorization vulnerability in Google Chrome on iOS prior to version 155.0.8059.39 allows a remote attacker to spoof UI elements via a crafted HTML page. Success requires the attacker to leverage social engineering . No information regarding specific exploits or in-the-wild exploitation...

EUVD-2026-93699

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93689

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106224

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within the Google Lens component. A remote attacker who has successfully compromised the renderer process can exploit this vulnerability to obtain cross-origin data by navigating the victim to a crafted H...

CVE-2026-106217

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within Google Lens . A remote attacker who has already compromised the renderer process can leverage this issue to leak cross-origin data by serving a crafted HTML page. This vulnerability carries a Chrom...

CVE-2026-106363

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process and utilized social engineering can bypass system access restrictions by serving a crafted HTML page. Th...

CVE-2026-106225

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106225

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93681

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93683

Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8...

CVE-2026-106267

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Network component. An attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . The vulnerability is categorized with a Medium security severi...