Search: 20.chromium

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

A vulnerability in the scheduling component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to bypass the web origin policy by using a crafted HTML page. The issue is related to incorrect authorization checks. The vulnerability has a low security severity rating from Chromium and a CVSS score of 4.3, indicating a medium severity level overall.

Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)

CVE-2026-106345 is a vulnerability in Google Chrome prior to version 155.0.8059.39 involving use of a released resource in the Session component. This flaw allows a remote attacker who has compromised the renderer process to spoof UI elements via a crafted HTML page. The vulnerability has a low severity rating from Chromium security and a CVSS score of 4.2 (medium severity).

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

A vulnerability in Google Chrome's SanitizerAPI prior to version 155.0.8059.39 allows a remote attacker to leak sensitive information via a crafted HTML page. The issue is classified with a low security severity by Chromium and has a CVSS score of 4.3, indicating a medium severity level overall.

CVE-2026-106325 is a vulnerability in Google Chrome prior to version 155.0.8059.39 involving incorrect reference resolution in the browser's core. This flaw allows a remote attacker, using social engineering, to leak cross-origin data through a crafted HTML page. The vulnerability has a low Chromium security severity and a CVSS score of 4.3, indicating medium severity. No known exploits are reported in the wild. A stable channel update addressing this issue has been released by Google.

Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

A race condition vulnerability exists in Google Chrome prior to version 155.0.8059.39. This flaw allows a remote attacker who has already compromised the renderer process to spoof UI elements by using a specially crafted HTML page. The vulnerability has a low severity rating from Chromium security and a CVSS score of 4.2, indicating medium severity overall.

Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)