Search: 20.chromium

2,833 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.3	EPSS 0.3%	CVE-2026-106221WebAPKs · Chromium CVE-2026-106221: Confused deputy High8.3EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106221 CVE-2026-106221 is a vulnerability in Chromium related to a confused deputy issue in WebAPKs. The flaw affects versions prior to 155.0.4283.48 and is fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.3%Report on CVE-2026-106221 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.3%	CVE-2026-106209Mobile · Chromium CVE-2026-106209: UI misrepresentation Medium5.4EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106209 CVE-2026-106209 is a vulnerability in Chromium related to UI misrepresentation on mobile platforms. Affected versions include those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.3%Report on CVE-2026-106209 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.9	EPSS 0.3%	CVE-2026-106206Mobile · Chromium CVE-2026-106206: Improper input validation Medium5.9EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106206 CVE-2026-106206 is an improper input validation vulnerability affecting the Chromium component in Microsoft products. The issue is resolved in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.3%Report on CVE-2026-106206 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.6	EPSS 0.1%	CVE-2026-106192Mobile · Chromium CVE-2026-106192: Information leak Medium4.6EPSS 0.1%2026-10-26GCVE DatabaseCVE-2026-106192 CVE-2026-106192 is an information leak vulnerability affecting Chromium on mobile platforms. The issue was addressed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.1%Report on CVE-2026-106192 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	7.5	EPSS 0.3%	CVE-2026-102327WebView · Chromium CVE-2026-102327: Incorrect authorization High7.5EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-102327 CVE-2026-102327 is an incorrect authorization vulnerability in the Chromium WebView component. It affects versions prior to and including 155.0.4283.48. A fix is available in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-102327 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.3	EPSS 0.3%	CVE-2026-110158Passwords · Chromium CVE-2026-110158: Use after free High8.3EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-110158 CVE-2026-110158 is a use-after-free vulnerability in the Chromium component related to password handling. This flaw affects Chromium versions prior to 155.0.4283.60. The issue has been addressed in version 155.0.4283.60. EPSS 0.3%Report on CVE-2026-110158 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.2%	CVE-2026-106282WebOTP · Chromium CVE-2026-106282: UI misrepresentation Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106282 CVE-2026-106282 is a vulnerability in Chromium's WebOTP feature involving UI misrepresentation. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.2%Report on CVE-2026-106282 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	6.8	EPSS 0.4%	CVE-2026-81813Elementor Website Builder (WordPress plugin) · Cross-site Scripting Medium6.8EPSS 0.4%2026-10-21CVE Database V5CVE-2026-81813 The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users with the Contributor role and above to store a payload which breaks out when the SVG is rendered inline in a page and executes in the browser of any user viewing it. Execution is specific to Chromium-based browsers; Firefox is not affected. EPSS 0.4%Vulnerability CWE-79	CVE Database V5	2026-10-21
High	8.8	EPSS 0.4%	CVE-2026-113274Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113274 Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113039Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113039 Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113125Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113125 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113013Google Chrome · Memory Corruption High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113013 Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113088Google Chrome · Memory Corruption High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113088 Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113083Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113083 Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113286Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113286 Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113227Google Chrome · Use After Free High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113227 Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
Medium	6.5	EPSS 0.3%	CVE-2026-113122Google Chrome · Memory Corruption Medium6.5EPSS 0.3%2026-10-20CVE Database V5CVE-2026-113122 Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.3%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-112996Google Chrome · Memory Corruption High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-112996 Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.5%	CVE-2026-113294Google Chrome · Improper Input Validation High8.8EPSS 0.5%2026-10-20CVE Database V5CVE-2026-113294 Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.5%Vulnerability	CVE Database V5	2026-10-20
High	8.8	EPSS 0.4%	CVE-2026-113046Google Chrome · Improper Input Validation High8.8EPSS 0.4%2026-10-20CVE Database V5CVE-2026-113046 Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low) EPSS 0.4%Vulnerability	CVE Database V5	2026-10-20

Page 11 of 160