CVE-2026-106257

Vendor

Google

Product

chrome, chromium

EPSS

0.003 (p27)

Exposure class

Browser, Operating system, Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 31
   Chrome release Chrome Releases 11d ago

   Stable Channel Update for ChromeOS / ChromeOS Flex

   M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS…

   CVE-2026-106200CVE-2026-106347CVE-2026-106204+114 more Google
2. 11
   CVE NVD 25d ago

   Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…

   Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-106257 Google