EUVD-2026-93684

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106300

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition in CacheStorage . A remote attacker who has already compromised the renderer process can use a crafted HTML page to read memory outside the sandbox . The security severity for this Chromium vulnerability is rated as ...

EUVD-2026-93675

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106194

A missing authorization vulnerability in WebAppInstalls affects Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process and used social engineering can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox...

EUVD-2026-93671

Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106194

Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93670

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93852

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106181

Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106238

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a race condition within the Fonts component. A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox using a crafted HTML page. The security ...

EUVD-2026-93858

Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106238

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106233

A use after free vulnerability exists in the Metrics component of Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbox . No specific exploit de...

CVE-2026-106393

A use after free vulnerability in the Storage component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. This attack is possible via a crafted HTML page if the attacker has already compromised the renderer process . Exploit...

EUVD-2026-93826

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106393

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93819

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106273

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a high-severity issue involving an uninitialized resource in the Video component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to read memory outside the sandbox . No specific exploit...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...