CVE-2026-106310

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a use of released resource within the FontAccess component. A remote attacker who has already compromised the renderer process can exploit this issue to bypass web origin policy by serving a crafted HTML page. The vulnerability is cl...

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106418

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-106418

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Network component. This vulnerability allows a remote attacker to bypass the web origin policy by leveraging social engineering and sending crafted network traffic . The impact is characterized as ...

EUVD-2026-93634

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

EUVD-2026-93629

Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106331

Google Chrome (Chromium) versions prior to 155.0.8059.39 are vulnerable to an improper input validation flaw in the Extensions component. A remote attacker could leverage social engineering to use a crafted Chrome extension to bypass the web origin policy , gaining access to a privileged page. Th...

CVE-2026-106221

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93620

Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106422

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93616

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93611

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Web Authentication (Passkeys & Security Keys) . This security issue allows a remote attacker to spoof UI elements when a user visits a crafted HTML page. The chromium security severity for this vulnera...

CVE-2026-106422

An incorrect authorization flaw exists in the API component of the Chromium browser , affecting Google Chrome versions prior to 155.0.8059.39 . A remote attacker can exploit this vulnerability by using a crafted HTML page to bypass web origin policy . The security severity is rated as Low by Chro...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106287

Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-106297

Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106362

Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...