CVE-2026-106415

Google Chrome Enterprise versions prior to 155.0.8059.39 are affected by an information leak vulnerability. A remote attacker can exploit this by using a crafted HTML page to leak sensitive information from the victim's browser. The vulnerability has been addressed in version 155.0.8059.39 and la...

CVE-2026-106241

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106223

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93677

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93676

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106283

A Use after free vulnerability exists in the Streaming component of Google Chrome versions prior to 155.0.8059.39 . A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing for the execution of arbitrary code within the sandbox. N...

CVE-2026-106314

Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106241

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106223

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106274

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93853

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106324

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the WebAppInstalls component. A remote attacker can exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The vulnerability has a Medium security severity. Whi...

CVE-2026-106265

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the File component. A remote attacker can leverage social engineering to spoof UI elements by tricking a user into visiting a crafted HTML page . The risk is classified as Medium severity, and the v...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106184

Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-106346

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106357

Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106346

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a High severity issue involving improper state validation within DevTools . A remote attacker can leverage this flaw to potentially execute arbitrary code inside the sandbox by viewing a crafted HTML page. No specific exploit informa...

CVE-2026-106278

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106318

A Use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Information regarding specific exploit availability is not provided...