CVE-2026-106226

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106230

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106230

Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106230

Google Chrome on Android is affected by a vulnerability prior to version 155.0.8059.39 . The flaw stems from an incorrect reference resolution in the Offline component, which allows a remote attacker who has already compromised the renderer process to obtain sensitive information through a crafte...

CVE-2026-106205

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Passwords component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass site isolation . This vulnerability has a Medium security sev...

CVE-2026-106226

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity issue caused by improper input validation in the Compositing component. A remote attacker who has successfully compromised the renderer process can exploit this flaw to spoof the address bar by serving a crafted HTM...

EUVD-2026-93732

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93733

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106410

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106410

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106284

Google Chrome on Windows versions prior to 155.0.8059.39 is vulnerable to an out-of-bounds read in the Printing component. A remote attacker who has already compromised the renderer process and leveraged social engineering can use a crafted HTML page to read memory outside the sandbox. This vulne...

CVE-2026-106410

Google Chrome versions prior to 155.0.8059.39 are vulnerable to missing authorization in Permissions. A remote attacker who has already compromised the renderer process can exploit this flaw to spoof UI elements by serving a crafted HTML page. The security severity is rated as Medium .

EUVD-2026-93729

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93726

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106303

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106303

Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106303

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an observable discrepancy in the Autofill AI component. A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to obtain sensitive information. No specific exploit detail...