118091 matches found
EUVD-2026-93755
Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106348
Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106307
Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106375
Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93756
Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106375
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incomplete cleanup flaw in the Dawn component. A remote attacker can exploit this by leveraging a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific exploit details or manual workarounds are ...
CVE-2026-106336
Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93745
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106336
Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93750
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93747
Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106232
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106336
An observable discrepancy in the Paint component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified with a Medium security severity. Remediation is available in version 155.0.8059.39 an...
CVE-2026-106232
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw. A remote attacker can leverage social engineering to spoof browser UI elements by tricking a user into visiting a crafted HTML page . The vulnerability is associated with CWE-451 and has been addressed in...
CVE-2026-106301
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106301
A confused deputy vulnerability exists in the Contextual Tasks component of Google Chrome (prior to version 155.0.8059.39 ). An attacker who has already compromised the renderer process can exploit this flaw by convincing a user to open a crafted HTML page. This allows the attacker to bypass syst...
CVE-2026-106403
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Accessibility component. This vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation using a crafted HTML page. The Chromium security ...
CVE-2026-106230
Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93737
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...