Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 152.0.7977.65, improper authorization in SiteIsolation allowed a remote attacker who had compromised the renderer process to bypass site isolation and access a privileged page via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The absence of authorization in the Omnibox within Google Chrome prior to version 153.0.8010.36 allowed a remote attacker to exploit social engineering techniques to bypass system access restrictions and gain access to a privileged page by using a specially crafted HTML page. Chromium security...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions and gain access to a privileged page through a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

In Google Chrome versions prior to 153.0.8010.36, improper authorization in “Isolated” mode allowed a remote attacker to bypass web origin policies and access a privileged page via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

A confused deputy in PriceTracking using Google Chrome on iOS before version 153.0.8010.47 allowed a remote attacker to bypass system access restrictions and gain access to a privileged page through crafted network traffic. Chromium security severity: Medium...

SUSE CVE-2026-106326

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106427

Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a confused deputy issue. A remote attacker can bypass system access restrictions to reach a privileged page by using a crafted HTML page . The Chromium security severity for this issue is rated as Low .

CVE-2026-106301

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93750

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301

A confused deputy vulnerability exists in the Contextual Tasks component of Google Chrome (prior to version 155.0.8059.39 ). An attacker who has already compromised the renderer process can exploit this flaw by convincing a user to open a crafted HTML page. This allows the attacker to bypass syst...

CVE-2026-106326

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

EUVD-2026-93703

Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed app. Chromium security severity: Medium...

CVE-2026-106196

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93695

Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106301: Unintended Proxy or Intermediary

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

PT-2026-106974

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass system access restrictions to reach a privileged page by using a...