[ CVE-2026-106401 · Published 6 Oct 2026 ]
Vulnerability in Google Chrome
[ Why it matters ]Priority signals
- Critical severity: CVSS 9.6
[ Description ]Official description
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1342
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1326
Multiple vulnerabilities in Palo Alto Networks products Translated from French
Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…
-
CERT-FRCERTFR-2026-AVI-1268
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
BSI CERT-BundWID-SEC-2026-3761
Google Chrome / Microsoft Edge: Multiple vulnerabilities Translated from German
[ References ]References
- chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.htmlRelease NotesVendor Advisory
- issues.chromium.org/issues/553129739Permissions Required