A use-after-free flaw (CWE-416) in the PDF component of Google Chrome, which uses PDFium, allows code execution inside the browser sandbox. An attacker can exploit it remotely by tricking a user into opening a crafted PDF file, for example via a website, an email attachment or an embedded PDF viewer. No authentication is required, but user interaction is. Code execution is limited to the sandbox, so a separate sandbox escape would be needed for full system compromise.
Google · Chrome
Google Chrome for iOS before 155.0.8059.39 contains an incomplete cleanup issue (CWE-459) in Autofill. A remote attacker who lures a user to a crafted HTML page can obtain sensitive information. The attack requires social engineering to get the victim to open the page.
Google · Chrome for iOS
Research and translation in progress – available shortly.
A race condition in the V8 JavaScript engine of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs only to lure a user to a crafted HTML page, and no login is required. Chromium rates the issue as Medium, and the code execution is confined to the sandbox, so a full compromise would need a further sandbox escape, which is not described for this CVE.
Google · Chrome
A use-after-free vulnerability (CWE-416) in the Track component of Google Chrome before 155.0.8059.39 can be exploited remotely. An attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The attack needs no authentication but requires that the user loads the page. The CVSS base score is 8.8 (High).
Google · Chrome
Google Chrome contains an incorrect authorization flaw in its Actor component, tracked as CVE-2026-106199. According to the CVE description, a remote attacker who has already compromised the renderer process could potentially bypass site isolation using a crafted HTML page. The Chromium security severity is rated Low, and the NVD CVSS score is 8.2 because the flaw is chained with a separate browser exploit.
Google · Chrome
Google Chrome versions before 155.0.8059.39 contain a missing authorization flaw in the FileSystem API. A remote attacker who has already compromised the renderer process can bypass web origin policy using a crafted HTML page. The bug is a second-stage issue that requires a separate renderer compromise and user interaction, such as visiting the malicious page.
Google · Chrome
Google Chrome desktop contains a use-after-free flaw in the Browser component. A remote attacker can execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. No privileges are needed, but the user must visit the page. The CVSS base score is 9.6 (critical).
Google · Chrome
Missing authorization in the Navigation component of Google Chrome on iOS allows a remote attacker to bypass the web origin policy and load a privileged page through a crafted HTML page. The attacker needs a user to open the crafted page, for example through phishing or a malicious link. The CVE record rates the impact as high confidentiality and low integrity and availability impact (CVSS 3.1: 7.6).
Google · Chrome
Google Chrome on macOS contains an incorrect authorization flaw in Chromoting, the remote-desktop component. A remote attacker can bypass system access restrictions using crafted network traffic. The issue only applies where Chromoting is enabled and accepting incoming remote-desktop connections; Chromium rates it Low, while NVD scores it 9.1 Critical.
Google · Chrome
Missing authorization in the WebAppInstalls feature of desktop Google Chrome before 155.0.8059.39 can be abused by an attacker who has already compromised the renderer process. With social engineering and a crafted HTML page, the attacker could potentially execute arbitrary code outside the browser sandbox. The attack is a chained scenario that requires a prior renderer compromise and user interaction, and Google rates the issue Medium.
Google · Chrome
Google Chrome versions before 155.0.8059.39 contain a use-after-free flaw in the HTML parser (CWE-416). A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The victim must visit the page, but no login is required. Sandbox code execution is usually one stage of a larger attack chain and not a full system compromise on its own.
Google · Chrome
Research and translation in progress – available shortly.
Google Chrome before 155.0.8059.39 contains a missing authorization check in its Actor component (CWE-862). An attacker who has already compromised the renderer process can use a crafted HTML page to potentially execute arbitrary code outside the browser sandbox. The attack has high complexity and requires user interaction. The NVD scores it 8.3; a third-party database shows 4.3.
Google · Chrome
A use-after-free flaw in the Media component of Google Chrome prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs the victim to open a crafted HTML page. Chromium rates the flaw High and CVSS 3.1 gives it 8.8.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Google Chrome on Windows before 155.0.8059.39 contains an uncontrolled search path element (CWE-427) in the CredentialProvider component. A local attacker who can get a program onto the system may be able to execute arbitrary code outside the browser sandbox. Exploitation requires user interaction, and the attack is only possible locally.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
