- EPSS 0.09%
- Veröffentlicht 06.10.2026 18:41:24
- Zuletzt bearbeitet 06.10.2026 19:57:00
Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security severity: Medium)
CVE-2026-106182
- EPSS 0.21%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 08.10.2026 13:05:39
UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106246
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:39:59
Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106282
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:44:02
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106302
- EPSS 0.19%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:43:06
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106311
- EPSS 0.17%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:42:32
Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106392
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:41:09
Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106416
- EPSS 0.19%
- Veröffentlicht 06.10.2026 18:41:23
- Zuletzt bearbeitet 07.10.2026 13:10:49
Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-106253
- EPSS 0.16%
- Veröffentlicht 06.10.2026 18:41:22
- Zuletzt bearbeitet 07.10.2026 13:12:33
Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-106279
- EPSS 0.08%
- Veröffentlicht 06.10.2026 18:41:22
- Zuletzt bearbeitet 07.10.2026 13:44:22
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium s...