283944 matches found
CVE-2026-106264
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93616
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106264
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106264
Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93611
Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106264
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Web Authentication (Passkeys & Security Keys) . This security issue allows a remote attacker to spoof UI elements when a user visits a crafted HTML page. The chromium security severity for this vulnera...
CVE-2026-106422
An incorrect authorization flaw exists in the API component of the Chromium browser , affecting Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this vulnerability by using a crafted HTML page to bypass web origin policy . The security severity is rated as Low by Chro...
CVE-2026-106287
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
EUVD-2026-93604
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-106287
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
CVE-2026-106297
Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106297
Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-93607
Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-106362
A missing authorization flaw exists in the DevTools component of Google Chrome prior to version 155.0.8059.39 . This vulnerability allows a remote attacker to bypass the web origin policy by leveraging social engineering and a crafted Chrome extension . The Chromium security severity is rated as ...
CVE-2026-106362
Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
EUVD-2026-93605
Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106287
A vulnerability in the CORS component of the Chromium browser (specifically Google Chrome ) allows a remote attacker to bypass the web origin policy via crafted network traffic. This issue is characterized by information loss and is assigned a Low security severity by Chromium. Affected versions ...
CVE-2026-106297
Google Chrome (Chromium) versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Scheduling component. A remote attacker can exploit this by serving a crafted HTML page to bypass the web origin policy . The vulnerability has been addressed in the 155.0.8059.39...
CVE-2026-106353
Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. Chromium security severity: Low...