CVE-2026-95327

Google Chrome contains an information leak in its Networking component in versions prior to 154.0.8037.57 . A remote attacker can exploit this vulnerability to leak sensitive information through a crafted HTML page . The security severity is rated as Low by Chromium. Remediation is available in v...

CVE-2026-95334

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect reference resolution in the WebProtect component. A remote attacker who has successfully compromised the renderer process could exploit this flaw to execute arbitrary code outside the sandbox using a crafted HTML page. R...

CVE-2026-95358

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to an incorrect authorization flaw in the Mobile component. This security issue allows a local attacker to bypass system access restrictions to reach a privileged page using a co-installed application. Exploitation details for...

CVE-2026-95307

A UI misrepresentation vulnerability exists in the ExtensionsMenu of Google Chrome prior to version 154.0.8037.57 . A remote attacker can use social engineering to spoof UI elements by hosting a crafted HTML page. This issue is categorized as Low severity by Chromium. Remediation is available in ...

CVE-2026-95333

Google Chrome experienced a use after free vulnerability in the Metrics component prior to version 154.0.8037.57 . This flaw allowed a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Remediation is available in version 154.0.8037.57 . Exploitation...

CVE-2026-95285

A missing authorization flaw in the WebView component of Google Chrome on Android (prior to version 154.0.8037.57 ) allows a remote attacker who has already compromised a renderer process to bypass the web origin policy . By tricking a user into loading a crafted HTML page, the attacker can acces...

CVE-2026-95311

A memory corruption vulnerability exists in the Fonts component of Google Chrome (prior to version 154.0.8037.57 ) and chromium-browser . The flaw occurs because the component improperly attempts to deallocate memory that was not dynamically allocated on the heap, leading to a free of non-heap me...

CVE-2026-95347

A use after free vulnerability exists in the Updater component of Google Chrome on Mac (prior to version 154.0.8037.57 ). A remote attacker can exploit this flaw using crafted network traffic to execute arbitrary code outside the sandbox . Remediation is available in version 154.0.8037.57 . Explo...

CVE-2026-95289

Google Chrome versions prior to 154.0.8037.57 are affected by an incorrect authorization vulnerability in Scroll . A remote attacker can leverage social engineering to obtain cross-origin data via a crafted HTML page. This issue has been addressed in the 154.0.8037.57 release. Exploitation detail...

CVE-2026-95344

A race condition within the DevTools component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass site isolation security boundaries. Exploitation requires social engineering to trick a user into installing a crafted Chrome extension , which can then be used to ...

CVE-2026-95323

A UI misrepresentation vulnerability in Chromium affects Google Chrome on iOS prior to version 154.0.8037.57 . A remote attacker could use social engineering and a crafted HTML page to spoof the address bar . This issue has been addressed in the update to version 154.0.8037.57 , as confirmed by v...

CVE-2026-95321

Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to a UI misrepresentation flaw in the Payments component. A remote attacker can exploit this by serving a crafted HTML page to spoof UI elements . Remediation involves updating the browser to version 154.0.8037.57 or later. Spe...

CVE-2026-95332

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to a use of uninitialized variable flaw in the Tint component. A remote attacker could exploit this by navigating to a crafted HTML page to read memory outside the sandbox . This issue affects the Chromium browser and was addr...

CVE-2026-95312

A flaw in Chromium (specifically in Passwords prior to version 154.0.8037.57 ) allows a remote attacker who has compromised the browser's renderer process to perform an information leak. By convincing a user to visit a crafted HTML page, the attacker can bypass cross-origin security boundaries to...

CVE-2026-95374

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in the Network component. This vulnerability allows a remote attacker to bypass the web origin policy by hosting a crafted HTML page. The impact is categorized as Medium severity with High integrity im...

CVE-2026-95300

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in DevTools . A remote attacker can leverage social engineering and crafted network traffic to bypass system access restrictions. This issue has been addressed in version 154.0.8037.57 , which is also the...

CVE-2026-95325

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a use-after-free condition in the ANGLE component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking a user into visiting a specially crafted HTML page. The issue is addressed in...

CVE-2026-95275

A flaw in the MediaStream component of Google Chrome (prior to version 154.0.8037.57 ) involves incorrect reference resolution. This vulnerability allows a remote attacker to bypass the web origin policy by tricking a user into opening a crafted HTML page. Successful exploitation could enable the...

CVE-2026-95336

An information leak exists in the Transactions Platform of Google Chrome versions prior to 154.0.8037.57 . A remote attacker can exploit this vulnerability by leveraging social engineering to trick a user into visiting a crafted HTML page , potentially resulting in the exposure of sensitive infor...

CVE-2026-95290

Google Chrome and the Chromium-based chromium-browser are affected by a vulnerability where a lack of authorization checks in the Near Field Communication (NFC) component allows a remote attacker to bypass system access restrictions. By compromising a renderer process and using a crafted HTML pag...

CVE-2026-95354

A use after free vulnerability exists in the Verifier component of Google Chrome prior to version 154.0.8037.57 . A remote attacker who has already compromised the renderer process can leverage this flaw to potentially execute arbitrary code outside the sandbox by sending crafted network traffic....

CVE-2026-95384

A race condition exists in the Transactions Platform of Google Chrome (prior to version 154.0.8037.57). This vulnerability allows a remote attacker to potentially leak sensitive information through a crafted HTML page. Remediation includes updating to version 154.0.8037.57 or later. Specific pack...

CVE-2026-95371

Google Chrome on Mac prior to version 154.0.8037.57 is vulnerable to a missing authorization flaw in Views . A remote attacker who has already compromised the renderer process can leverage social engineering to spoof UI elements via a crafted HTML page. This issue is rated as Medium severity by C...

CVE-2026-95353

A use-after-free vulnerability exists in the Bindings component of Google Chrome (prior to version 154.0.8037.57). This flaw allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to open a specially crafted HTML page . The vulnerability occurs when the applica...

CVE-2026-95363

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw within the FileSystem component. A remote attacker can utilize social engineering and a crafted HTML page to spoof UI elements. Remediation is available in version 154.0.8037.57 , with specific fixes confi...

CVE-2026-95341

Google Chrome versions prior to 154.0.8037.57 are vulnerable to improper input validation within the Desktop component. A remote attacker who successfully compromises the renderer process can exploit this flaw using crafted network traffic to potentially achieve arbitrary code execution outside t...

CVE-2026-95360

A race condition exists in the Editing component of Google Chrome prior to version 154.0.8037.57 . This vulnerability allows a remote attacker to utilize social engineering to trick a user into visiting a crafted HTML page, potentially leading to the theft of sensitive information . Remediation i...

CVE-2026-95276

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a medium-severity security issue involving improper input validation in Themes . A remote attacker who has successfully compromised the renderer process can potentially achieve arbitrary code execution inside the sandbox by sending c...

CVE-2026-95295

A security vulnerability in Google Chrome on iOS prior to version 154.0.8037.57 allows a local attacker to perform an information leak of sensitive data via physical access . The impact is categorized as a medium security severity. Remediation involves upgrading to the affected version, as confir...

CVE-2026-95314

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in the HID component. A remote attacker who has already compromised the renderer process can exploit this issue via a crafted HTML page to bypass system access restrictions. This vulnerability has been...

CVE-2026-95330

Google Chrome versions prior to 154.0.8037.57 are vulnerable to improper state validation in the Downloads component. This flaw allows a remote attacker to bypass system access restrictions by navigating to a crafted HTML page . The impact is rated as Medium by Chromium security standards. Remedi...

CVE-2026-95317

An incorrect authorization flaw exists in the MediaCapture component of the Chromium browser (Google Chrome) prior to version 154.0.8037.57 . A remote attacker could leverage social engineering to use a crafted Chrome extension to obtain cross-origin data . Remediation involves updating the softw...

CVE-2026-95370

An inappropriate implementation in the NFC component of Google Chrome prior to version 154.0.8037.57 allows a remote attacker to bypass system access restrictions through a crafted HTML page. This vulnerability is categorized with Medium security severity by Chromium. Remediation is available in ...

CVE-2026-95345

A use-after-free vulnerability exists in the Actor component of Google Chrome (and chromium-browser ) versions prior to 154.0.8037.57 . The flaw occurs when memory is improperly accessed after being released, leading to memory corruption. A remote attacker can exploit this by enticing a user to o...

CVE-2026-95303

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity flaw involving incomplete cleanup in SmartCard . A remote attacker could utilize social engineering and a crafted HTML page to bypass system access restrictions. This vulnerability is addressed in the 154.0.8037.57 ...

CVE-2026-95346

Google Chrome (prior to version 154.0.8037.57 ) is vulnerable to a UI misrepresentation in the Chromoting component. A remote attacker can exploit this by sending crafted network traffic to spoof UI elements . This vulnerability has been addressed in updated packages, such as chromium 154.0.8037....

CVE-2026-95294

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a UI misrepresentation flaw in the Browser component. A remote attacker can exploit this by leveraging social engineering to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; for examp...

CVE-2026-95337

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to a UI misrepresentation flaw in Messages . A remote attacker can leverage social engineering to spoof UI elements through a crafted HTML page. Remediation is available in version 154.0.8037.57 ; for example, Debian provides ...

CVE-2026-95320

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in the Navigation component. A remote attacker who has successfully compromised the renderer process can exploit this issue to spoof the address bar by presenting a crafted HTML page to the user. Remediat...

CVE-2026-95376

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a flaw where an externally controlled reference in DevTools allows an adjacent attacker to bypass system access restrictions. This exploitation can be achieved through crafted network traffic combined with social engineering . The vu...

CVE-2026-95369

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a vulnerability involving an inappropriate implementation in XML . A remote attacker could exploit this via a crafted HTML page to potentially execute arbitrary code inside the sandbox . Remediation is available in version 154.0.8037...

CVE-2026-95362

A Cross-site request forgery (CSRF) vulnerability exists in DevTools within Google Chrome prior to version 154.0.8037.57 . A remote attacker could leverage social engineering to bypass the web origin policy using a crafted HTML page. This vulnerability is also present in the chromedriver package ...

CVE-2026-95359

Google Chrome on Android versions prior to 154.0.8037.57 is vulnerable to an uninitialized resource flaw within the GPU component. A remote attacker who has compromised the renderer process can leverage a crafted HTML page to read memory outside the sandbox. This vulnerability results in potentia...

CVE-2026-95297

A missing authorization flaw in the Contextual Tasks component of Google Chrome (prior to version 154.0.8037.57 ) allows a remote attacker to bypass the web origin policy via a crafted HTML page. This vulnerability is listed as Medium severity by Chromium security teams. Exploitation details are ...

CVE-2026-95302

Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to an incorrect authorization flaw within the WebAPK (Web Android Package) implementation. This issue allows a local attacker to bypass security boundaries using a co-installed application to obtain sensitive cross-origin data ...

CVE-2026-95331

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an out of bounds write in the ANGLE component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by interacting with a crafted HTML page. Remediation is available in version 154.0.8037.57 , ...

CVE-2026-95375

Google Chrome and chromium-browser versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in the BrowserTag component. A remote attacker who has compromised a renderer process can use a crafted HTML page to bypass the web origin policy . This allows the attacker to circ...

CVE-2026-95381

Google Chrome is vulnerable to an improper input validation flaw in its Printing component in versions prior to 154.0.8037.57 . A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox by providing a crafted H...

CVE-2026-95287

Google Chrome versions prior to 154.0.8037.57 are affected by a missing authorization check in the Navigation mechanism. This flaw allows a remote attacker who has compromised a renderer process to bypass site isolation protections by tricking a user into loading a crafted HTML page. Site isolati...

CVE-2026-95382

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Medium severity security flaw caused by improper input validation in the Auth component. A remote attacker who has successfully compromised the renderer process can use social engineering to trick a user into visiting a crafted HTM...