CVE-2026-106393

A use after free vulnerability in the Storage component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. This attack is possible via a crafted HTML page if the attacker has already compromised the renderer process . Exploit...

CVE-2026-106273

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106273

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106273

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an uninitialized resource flaw in the Video component. A remote attacker who has already compromised the renderer process can exploit this to read memory outside the sandbox by viewing a crafted HTML page. The Chromium security sever...

EUVD-2026-93819

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106364

Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93808

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106412

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93811

Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106377

Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106412

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106364

Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-106364

Google Chrome versions prior to 155.0.8059.39 are affected by a high-severity security flaw involving incorrect authorization in the Omnibox component. An attacker who has already compromised the renderer process can exploit this issue to obtain sensitive information by presenting a crafted HTML ...

CVE-2026-106412

Google Chrome on Mac versions prior to 155.0.8059.39 is vulnerable to a race condition in the Core component. A remote attacker who has already compromised the renderer process can use social engineering and a crafted HTML page to potentially execute arbitrary code outside the sandbox . No specif...

CVE-2026-106369

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Translate component. This vulnerability allows a remote attacker who has already compromised the renderer process to bypass site isolation by using a crafted HTML page. The vulnerability is associa...

CVE-2026-106369

Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93799

Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-106327

A vulnerability in the Core component of the Chromium browser (Google Chrome) allows a remote attacker who has already compromised the renderer process to bypass system access restrictions. This is achieved by navigating the victim to a crafted HTML page . The flaw is categorized as Incorrect Aut...