Sign in

6.5 Medium

CVE-2026-106361 Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a…

Description

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

Affected products and versions

Product	Affected versions	Fixed in
Chrome 155.0	earliest → < 155.0.8059.39	155.0.8059.39

The 6072 CVEs of Chrome →

CVE-2026-120930 Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web… 5.4 Medium CVE-2026-120931 Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to… 9.6 Critical CVE-2026-121195 Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass… 8.8 High CVE-2026-121141 Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social… 5.4 Medium

Do you use Chrome?

Track this CVE Watch Chrome Check my SBOMs

www.cveye.io/en/cve/CVE-2026-106361

Timeline

Published October 6, 2026
Last modified October 8, 2026

References

chromereleases.googleblog.com chromereleases.googleblog.com
issues.chromium.org issues.chromium.org

Track this CVE