Vulnerabilities

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code…

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

chrome, chromium

EPSS

0.003 (p24)

Exposure class

Browser

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-106278 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 31
   Chrome release Chrome Releases 11d ago

   Stable Channel Update for ChromeOS / ChromeOS Flex

   CVE-2026-106200CVE-2026-106347CVE-2026-106204+114 more Google
2. 36
   Advisory MSRC 15d ago

   Chromium CVE-2026-106278: Use after free

   Fix available CVE-2026-106278 Microsoft Google
3. 17
   CVE NVD 25d ago

   Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML…

   CVE-2026-106342 Google
4. 17
   CVE NVD 25d ago

   Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a…

   CVE-2026-106341 Google
5. 17
   CVE NVD 25d ago

   Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to…

   CVE-2026-106339 Google
6. 11
   CVE NVD 25d ago

   UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML…

   CVE-2026-106337 Google
7. 17
   CVE NVD 25d ago

   Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

   CVE-2026-106336 Google
8. 17
   CVE NVD 25d ago

   Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive…

   CVE-2026-106334 Google
9. 23
   CVE NVD 25d ago

   Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

   CVE-2026-106332 Google
10. 17
    CVE NVD 25d ago

    Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page.

    CVE-2026-106330 Google
11. 11
    CVE NVD 25d ago

    Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a…

    CVE-2026-106326 Google
12. 17
    CVE NVD 25d ago

    Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin…

    CVE-2026-106322 Google
13. 17
    CVE NVD 25d ago

    Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive…

    CVE-2026-106321 Google
14. 11
    CVE NVD 25d ago

    Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI…

    CVE-2026-106320 Google
15. 11
    CVE NVD 25d ago

    UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted…

    CVE-2026-106317 Google
16. 17
    CVE NVD 25d ago

    UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof…

    CVE-2026-106316 Google
17. 17
    CVE NVD 25d ago

    Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a…

    CVE-2026-106315 Google
18. 11
    CVE NVD 25d ago

    UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted…

    CVE-2026-106305 Google
19. 17
    CVE NVD 25d ago

    Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML…

    CVE-2026-106304 Google
20. 17
    CVE NVD 25d ago

    Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read…

    CVE-2026-106300 Google