281905 matches found
CVE-2026-106198
Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106408
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93697
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106408
Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93695
Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106196
Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106196
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Navigation component. A remote attacker can exploit this by using a crafted HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The vulnerability is ...
CVE-2026-106408
A protection mechanism failure in the Mobile component of Google Chrome on iOS (prior to version 155.0.8059.39 ) allows a remote attacker to bypass web origin policy policies by visiting a crafted HTML page. This vulnerability is classified as Medium severity by Chromium. Exploitation details are...
CVE-2026-106189
Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106189
Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93686
Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106189
Google Chrome on iOS prior to version 155.0.8059.39 is vulnerable to a code injection flaw in ReaderMode . A remote attacker can leverage social engineering to bypass the web origin policy by tricking a user into visiting a crafted HTML page. The Chromium security severity is rated as Medium . Ex...
CVE-2026-106266
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106381
Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93685
Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93680
Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106381
Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to an incorrect authorization flaw within the Passwords component. A remote attacker could exploit this by leveraging a crafted HTML page to bypass the web origin policy . The Chromium security severity for this issue is Medium . ...
CVE-2026-106266
A confused deputy flaw exists in the Contextual Tasks component of the Chromium browser (Google Chrome) prior to version 155.0.8059.39 . This vulnerability allows a remote attacker who has already compromised the renderer process to bypass the web origin policy and access a privileged page using ...