Search: 20.chromium

2,833 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.2%	CVE-2026-106397Mobile · Chromium CVE-2026-106397: Incorrect authorization Medium6.1EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106397 CVE-2026-106397 is an incorrect authorization vulnerability affecting the Chromium component in Microsoft products. The issue was addressed in version 155.0.4283.48. No CVSS score or detailed impact description is provided. EPSS 0.2%Report on CVE-2026-106397 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.7	EPSS 0.2%	CVE-2026-106395Dawn · Chromium CVE-2026-106395: Uninitialized resource Medium4.7EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106395 CVE-2026-106395 is a vulnerability in the Chromium component Dawn involving an uninitialized resource. Affected versions are prior to 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106395 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.8	EPSS 0.3%	CVE-2026-106387Mobile · Chromium CVE-2026-106387: Missing authorization High8.8EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106387 CVE-2026-106387 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106387 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106380Chromium CVE-2026-106380: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106380 CVE-2026-106380 is a vulnerability in Chromium involving UI misrepresentation. The issue was addressed and fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106380 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106368Chromium CVE-2026-106368: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106368 CVE-2026-106368 is a vulnerability in Chromium related to UI misrepresentation. It affects versions prior to and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106368 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.4	EPSS <0.1%	CVE-2026-106367Mobile · Chromium CVE-2026-106367: Missing authorization High8.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106367 CVE-2026-106367 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS <0.1%Report on CVE-2026-106367 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106366CustomTabs · Chromium CVE-2026-106366: Incomplete cleanup Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106366 CVE-2026-106366 is a vulnerability in Chromium related to incomplete cleanup in the CustomTabs component. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106366 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.5	EPSS 0.3%	CVE-2026-106361Microsoft · Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile Medium6.5EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106361 CVE-2026-106361 is a vulnerability in Chromium related to incorrect provision of specified functionality on mobile platforms. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106361 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.5	EPSS 0.2%	CVE-2026-106353Mobile · Chromium CVE-2026-106353: Improper input validation Medium6.5EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106353 CVE-2026-106353 is a vulnerability in Chromium related to improper input validation in the mobile component. Affected versions include all versions prior to 155.0.4283.48, which contains the fix. EPSS 0.2%Report on CVE-2026-106353 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106337Chromium CVE-2026-106337: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106337 CVE-2026-106337 is a vulnerability in Microsoft Chromium-based software involving UI misrepresentation. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106337 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.4	EPSS <0.1%	CVE-2026-106326UI · Chromium CVE-2026-106326: Confused deputy Medium4.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106326 CVE-2026-106326 is a vulnerability in Chromium described as a confused deputy issue in the user interface. It affects Microsoft-distributed Chromium versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS <0.1%Report on CVE-2026-106326 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.2	EPSS 0.2%	CVE-2026-106320UI · Chromium CVE-2026-106320: Use of released resource Medium4.2EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106320 CVE-2026-106320 is a vulnerability in Chromium involving the use of a released resource in the user interface. This flaw affects versions prior to and including 155.0.4283.48. A fix is available in version 155.0.4283.48. There are no known exploits in the wild and no CVSS score has been assigned. EPSS 0.2%Report on CVE-2026-106320 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106317FullScreen · Chromium CVE-2026-106317: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106317 CVE-2026-106317 is a vulnerability in Chromium related to UI misrepresentation in FullScreen mode. The issue affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106317 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.1	EPSS <0.1%	CVE-2026-106313Browser · Chromium CVE-2026-106313: Incorrect authorization Medium5.1EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106313 CVE-2026-106313 is a vulnerability in Chromium related to incorrect authorization in the browser. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS <0.1%Report on CVE-2026-106313 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106305Mobile · Chromium CVE-2026-106305: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106305 CVE-2026-106305 is a vulnerability in Chromium related to UI misrepresentation on mobile platforms. The issue was fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106305 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Critical	9.6	EPSS 0.3%	CVE-2026-106298Chrome Tabs · Chromium CVE-2026-106298: Use after free Critical9.6EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106298 CVE-2026-106298 is a use-after-free vulnerability in Chrome Tabs that affects Chromium versions prior to 155.0.4283.48. This flaw has been addressed in version 155.0.4283.48. No public exploit or active exploitation in the wild has been reported. EPSS 0.3%Report on CVE-2026-106298 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106296UI · Chromium CVE-2026-106296: Improper privilege management Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106296 CVE-2026-106296 is a vulnerability in Chromium involving improper privilege management in the user interface. It affects versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106296 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.7	EPSS 0.2%	CVE-2026-106290GPU · Chromium CVE-2026-106290: Uninitialized resource Medium4.7EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106290 CVE-2026-106290 is a vulnerability in Chromium related to an uninitialized resource in the GPU component. The issue affects versions prior to 155.0.4283.48, with the fixed version being 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106290 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.1	EPSS <0.1%	CVE-2026-106254Mobile · Chromium CVE-2026-106254: Information leak Medium5.1EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106254 CVE-2026-106254 is an information leak vulnerability affecting Chromium-based Microsoft software on mobile platforms. The issue has been addressed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS <0.1%Report on CVE-2026-106254 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.7	EPSS 0.3%	CVE-2026-106223GPU · Chromium CVE-2026-106223: Uninitialized resource Medium4.7EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106223 CVE-2026-106223 is a vulnerability in the Chromium component used by Microsoft products involving an uninitialized resource in the GPU. The issue affects versions prior to 155.0.4283.48 and is fixed starting from version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106223 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26

Page 10 of 160