CVE record · 3 sources
CVE-2026-106226
Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.003 (p27)
- Exposure class
- Browser, Operating system, Mobile OS
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Stable Channel Update for ChromeOS / ChromeOS Flex
M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS…
-
Chromium CVE-2026-106226: Improper input validation
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
-
Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process…
Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)