EUVD-2026-93727

Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106201

A race condition vulnerability exists in the V8 engine within Google Chrome versions prior to 155.0.8059.39 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by presenting a crafted HTML page . The vulnerability is classified with a High base severity (CVSS 3.1 sco...

CVE-2026-106228

Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106228

A confused deputy vulnerability exists in Google Lens within Google Chrome versions prior to 155.0.8059.39 . An attacker who has already compromised the renderer process can exploit this flaw by using a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specific expl...

EUVD-2026-93701

Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93696

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106414

A vulnerability in Google Chrome on iOS (prior to version 155.0.8059.39 ) was caused by improper input validation . A remote attacker could use social engineering to trick a user into visiting a crafted HTML page , potentially leading to the execution of arbitrary code outside the sandbox . While...

CVE-2026-106414

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106335

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106335

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw within the Media component. A remote attacker can exploit this vulnerability by tricking a user into visiting a crafted HTML page , which could result in arbitrary code execution inside the sandbox. No specific ...

EUVD-2026-93687

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106283

Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106283

A Use after free vulnerability exists in the Streaming component of Google Chrome versions prior to 155.0.8059.39 . A remote attacker could leverage social engineering to trick a user into visiting a crafted HTML page, potentially allowing for the execution of arbitrary code within the sandbox. N...

CVE-2026-106241

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93674

Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106241

Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93859

Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106194

A missing authorization vulnerability in WebAppInstalls affects Google Chrome versions prior to 155.0.8059.39 . A remote attacker who has already compromised the renderer process and used social engineering can leverage a crafted HTML page to potentially execute arbitrary code outside the sandbox...

CVE-2026-106315

Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106315

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Use after free flaw within the Modularization component. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by visiting a crafted HTML page. Remediation is available in version 155.0.8059.39 or...