CVE-2026-106334
- EPSS 0.24%
- Veröffentlicht 06.10.2026 18:41:42
- Zuletzt bearbeitet 06.10.2026 21:17:12
Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
- EPSS 0.14%
- Veröffentlicht 06.10.2026 18:41:42
- Zuletzt bearbeitet 06.10.2026 19:57:00
Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106390
- EPSS 0.18%
- Veröffentlicht 06.10.2026 18:41:42
- Zuletzt bearbeitet 07.10.2026 13:41:19
Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
- EPSS 0.21%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 06.10.2026 19:58:37
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106256
- EPSS 0.22%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:12:38
Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106316
- EPSS 0.16%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:42:10
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106320
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:38:34
Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106339
- EPSS 0.3%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:47:37
Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106371
- EPSS 0.22%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:46:55
Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106413
- EPSS 0.14%
- Veröffentlicht 06.10.2026 18:41:41
- Zuletzt bearbeitet 07.10.2026 13:12:57
Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)