118091 matches found
CVE-2026-106330
Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93769
Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106337
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93767
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93764
Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106337
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106337
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a UI misrepresentation flaw. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . The vulnerability is associated with CWE-451 . No specific exploitation details or mitigation steps are p...
CVE-2026-106330
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an information leak within the Paint component. A remote attacker can exploit this vulnerability by utilizing a crafted HTML page to leak sensitive information from the user's system. The vulnerability has been addressed in version 1...
CVE-2026-106352
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in WebProtect . A remote attacker can leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing the attacker to obtain sensitive information . No specific expl...
CVE-2026-106398
Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106304
Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106304
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an out-of-bounds read flaw within the ANGLE component. A remote attacker can exploit this vulnerability by hosting a crafted HTML page , which allows them to read memory outside the sandbox. No specific details regarding exploit avai...
CVE-2026-106395
Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93761
Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106395
Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to an uninitialized resource issue within the Dawn component. A remote attacker could exploit this by hosting a crafted HTML page to read memory outside the sandbox . The vulnerability is assigned a Medium severity by Chromium...
CVE-2026-106262
Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106360
Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106262
Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...