Threats affecting pkg:maven/com.microsoft/chromium

6 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.2%	CVE-2026-106427Mobile · Chromium CVE-2026-106427: Confused deputy Medium5.4EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106427 CVE-2026-106427 is a vulnerability in Chromium involving a confused deputy issue on mobile platforms. A fix for this vulnerability is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106427 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.8	EPSS 0.3%	CVE-2026-106387Mobile · Chromium CVE-2026-106387: Missing authorization High8.8EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106387 CVE-2026-106387 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS 0.3%Report on CVE-2026-106387 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
High	8.4	EPSS <0.1%	CVE-2026-106367Mobile · Chromium CVE-2026-106367: Missing authorization High8.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106367 CVE-2026-106367 is a vulnerability in Chromium related to missing authorization in the mobile version. Affected versions are those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. EPSS <0.1%Report on CVE-2026-106367 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.4	EPSS <0.1%	CVE-2026-106326UI · Chromium CVE-2026-106326: Confused deputy Medium4.4EPSS <0.1%2026-10-26GCVE DatabaseCVE-2026-106326 CVE-2026-106326 is a vulnerability in Chromium described as a confused deputy issue in the user interface. It affects Microsoft-distributed Chromium versions prior to 155.0.4283.48. A fix is available in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS <0.1%Report on CVE-2026-106326 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	4.7	EPSS 0.2%	CVE-2026-106290GPU · Chromium CVE-2026-106290: Uninitialized resource Medium4.7EPSS 0.2%2026-10-26GCVE DatabaseCVE-2026-106290 CVE-2026-106290 is a vulnerability in Chromium related to an uninitialized resource in the GPU component. The issue affects versions prior to 155.0.4283.48, with the fixed version being 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.2%Report on CVE-2026-106290 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26
Medium	5.4	EPSS 0.3%	CVE-2026-106209Mobile · Chromium CVE-2026-106209: UI misrepresentation Medium5.4EPSS 0.3%2026-10-26GCVE DatabaseCVE-2026-106209 CVE-2026-106209 is a vulnerability in Chromium related to UI misrepresentation on mobile platforms. Affected versions include those before and including 155.0.4283.48. The issue has been fixed in version 155.0.4283.48. No CVSS score or detailed impact information is provided. EPSS 0.3%Report on CVE-2026-106209 Vulnerability Microsoft Security Response Center #microsoft-security-response-ce	GCVE Database	2026-10-26

Page 1 of 1