DEBIAN-CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-106181

Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-106185

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106118

ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T6, and Modified Huffman decompressors using the full frame width. TiffDecoderCore.DecodeTilesChunky can therefore...

CVE-2026-106439 Hydra: Mutable instantiate policy sets allow target blocklist bypass

Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker who controls multiple sibling target entries can resol...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93653

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93651

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in its Media component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to obtain sensitive information . The Chromium security severity for this i...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106345

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106345

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource flaw within the Session component . This vulnerability allows a remote attacker, who has already compromised the renderer process , to spoof UI elements by serving a crafted HTML page. The impact is categor...

EUVD-2026-93639

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106339

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106320

Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106320

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use of Released Resource in UI (CWE-672). A remote attacker who has already compromised the renderer process can exploit this flaw to spoof UI elements by serving a crafted HTML page. This issue is classified as Low severity by Chr...

CVE-2026-106339

A flaw in the Core component of Google Chrome (prior to version 155.0.8059.39 ) allows for a use of released resource condition. A remote attacker who has already compromised a browser renderer process can exploit this by enticing a user to visit a crafted HTML page . Successful exploitation enab...

CVE-2026-106413

A race condition in the browser component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker who has already compromised the renderer process to spoof UI elements using a crafted HTML page. This vulnerability is categorized with a Low security severity by Chromium. No specif...