Threat database

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106366 is a vulnerability in Google Chrome on Android prior to version 155.0.8059.39. It involves incomplete cleanup in the CustomTabs feature, which allows a remote attacker to bypass the web origin policy using a crafted HTML page. The vulnerability has a medium severity rating with a CVSS score of 5.4.

An incorrect authorization vulnerability in Google Chrome prior to version 155.0.8059.39 allows a remote attacker who has compromised the renderer process to bypass system access restrictions via a crafted HTML page. This vulnerability has a high severity rating and affects Chrome desktop versions before 155.0.8059.39.

Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-106347 is a use-after-free vulnerability in the Track component of Google Chrome versions prior to 155.0.8059.39. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability is rated with a high severity CVSS score of 8.8. Google has released an update to address this issue.

CVE-2026-106358 is a critical use-after-free vulnerability in the Navigation component of Google Chrome prior to version 155.0.8059.39. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVE-2026-106382 is a critical use-after-free vulnerability in the Chromecast component of Google Chrome versions prior to 155.0.8059.39. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.

CVE-2026-56952 is an elevation of privilege vulnerability in Google Android due to a missing permission check in the platform_msg_handler_init function. This flaw allows a local attacker with system execution privileges to bypass permission checks and escalate privileges without requiring user interaction. The vulnerability has a medium severity rating with a CVSS score of 6.7.

CVE-2026-56936 is an elevation of privilege vulnerability in Google Android's wacom_sys.c component. It is caused by a missing bounds check in the wacom_hid_set_device_mode function, leading to an out-of-bounds write. Exploitation does not require user interaction or prior privileges. The vulnerability has a CVSS score of 6.8, indicating medium severity.

CVE-2026-56906 is a local elevation of privilege vulnerability in Google Android caused by a use-after-free condition in the ep_free function of eventpoll.c. Exploitation does not require user interaction or additional execution privileges. The vulnerability arises from a race condition and can lead to high impact on confidentiality, integrity, and availability.

CVE-2026-55330 is a critical elevation of privilege vulnerability in Google Android's BluetoothCccHandlerCallbackImpl component. It involves a use-after-free condition caused by a logic error in bluetooth_ccc.cc. This flaw allows remote code execution without requiring user interaction or additional privileges.

CVE-2026-55307 is a medium severity information disclosure vulnerability in Google Android. It arises from a logic error in the kdn_set_sysregs_prot function within hwcrypto-kdn.c. Exploitation requires local system execution privileges but no user interaction. The flaw could allow an attacker with high privileges on the device to disclose sensitive information. No patch or remediation details are currently provided.

CVE-2026-0198 is an information disclosure vulnerability in Google Android caused by a missing permission check in the is_pd_allowed function of gem_msg.c. It allows local attackers with System execution privileges to bypass permissions and access sensitive information without user interaction. The vulnerability has a medium severity with a CVSS score of 4.4.

CVE-2026-49878 is a high-severity remote code execution vulnerability in Google Android affecting versions 14, 15, 16, 16-qpr2, and 17. The flaw exists in the wpas_handle_robust_av_scs_recv_action function of robust_av.c, where a logic error can cause an out-of-bounds write. Exploitation does not require user interaction but does require system-level execution privileges.

CVE-2026-28648 is a high-severity elevation of privilege vulnerability in Google Android affecting versions 14, 15, 16, and 16-qpr2. It involves a permission bypass in the Settings component due to a confused deputy issue, allowing local attackers to escalate privileges without needing additional execution rights or user interaction.

CVE-2026-28647 is a high severity elevation of privilege vulnerability in Google Android affecting versions 14, 15, and 16-qpr2. It stems from a logic error in the updateState function of DeviceAdminAppsPreferenceController.java, allowing a local attacker to bypass permissions and escalate privileges without requiring user interaction.

CVE-2026-28641 is a high-severity elevation of privilege vulnerability in Google Android affecting versions 14, 15, and 16-qpr2. It arises from a logic error in the shouldDisableUninstallButton method of ApplicationActionButtonsPreferenceController.java, allowing a local attacker to bypass permission checks and escalate privileges without requiring user interaction.