| CVE-2026-106259 |
Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106417 |
Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute…
|
9.6
Critical
|
Oct 6, 2026 |
| CVE-2026-106186 |
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a…
|
8.6
High
|
Oct 6, 2026 |
| CVE-2026-106247 |
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the…
|
8.3
High
|
Oct 6, 2026 |
| CVE-2026-106192 |
Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain…
|
4.6
Medium
|
Oct 6, 2026 |
| CVE-2026-106264 |
Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106399 |
Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social…
|
3.3
Low
|
Oct 6, 2026 |
| CVE-2026-106422 |
Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-106199 |
Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had…
|
8.2
High
|
Oct 6, 2026 |
| CVE-2026-106275 |
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read…
|
4.7
Medium
|
Oct 6, 2026 |
| CVE-2026-106287 |
Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-106297 |
Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-106260 |
Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-106299 |
Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106362 |
Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-106187 |
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had…
|
4.2
Medium
|
Oct 6, 2026 |
| CVE-2026-106252 |
Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute…
|
8.8
High
|
Oct 6, 2026 |
| CVE-2026-106306 |
Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106309 |
Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to…
|
8.8
High
|
Oct 6, 2026 |
| CVE-2026-106394 |
Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social…
|
4.3
Medium
|
Oct 6, 2026 |
| CVE-2026-106427 |
Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106250 |
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social…
|
5.4
Medium
|
Oct 6, 2026 |
| CVE-2026-106191 |
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the…
|
8.3
High
|
Oct 6, 2026 |
| CVE-2026-106312 |
Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social…
|
6.5
Medium
|
Oct 6, 2026 |
| CVE-2026-106317 |
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to…
|
5.4
Medium
|
Oct 6, 2026 |