118077 matches found
CVE-2026-106252
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106309
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106309
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization issue within the Selection component. A remote attacker can exploit this by using a crafted HTML page to obtain sensitive information . While the Chromium security severity is rated as Low, the CVSS 3...
CVE-2026-106427
Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a confused deputy issue. A remote attacker can bypass system access restrictions to reach a privileged page by using a crafted HTML page . The Chromium security severity for this issue is rated as Low .
EUVD-2026-93603
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106427
Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106252
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106427
Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106250
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106250
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Actor component. A remote attacker could leverage social engineering to bypass system access restrictions by tricking a user into visiting a crafted HTML page . This issue has been addressed in the...
CVE-2026-106372
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93585
Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106276
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation issue within the Payments component. A remote attacker can leverage social engineering to spoof UI elements by hosting a crafted HTML page. The vulnerability is categorized as having Low security severity by Ch...
CVE-2026-106338
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106276
UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106372
A vulnerability in Google Chrome prior to version 155.0.8059.39 involves incorrect authorization in the UI. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by navigating to a crafted HTML page . The vulnerability is categorized as having a Medium secur...
CVE-2026-106338
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw within the PictureInPicture functionality. A remote attacker can utilize a crafted HTML page to spoof the address bar , potentially misleading users. This issue has a Chromium security severity o...
CVE-2026-106321
Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106321
Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...