CVE-2026-106299

Google Chrome versions prior to 155.0.8059.39 are affected by an improper input validation flaw in the WebAudio component. A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. This vulnerability is rated as Low severi...

CVE-2026-106427

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106306

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93602

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93592

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Permissions . A remote attacker who has already compromised the renderer process and uses social engineering can use a crafted HTML page to bypass system access restrictions. The Chromium security seve...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106263

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106263

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a Medium severity security issue. The flaw stems from improper input validation within the SignIn component, which could allow a remote attacker to bypass system access restrictions. This attack requires the use of social engineering...

EUVD-2026-93769

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106404

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106229

UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106229

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the FileSystem component. This issue allows a remote attacker to bypass system access restrictions by leveraging social engineering through a crafted HTML page . The vulnerability is classified with...

EUVD-2026-93718

Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93693

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106407

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. An attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions . No specific exploit details or in-the-wild ...

CVE-2026-106244

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the permissions subsystem . This vulnerability allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic . Successful exploitation can result in unaut...

EUVD-2026-93690

Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...