cyfenced.com →

[ CVE-2026-106414 · Published 6 Oct 2026 ]

Vulnerability in Google Chrome

CVSS 9.6 EPSS <1%3 agency advisoriesNo fix listed yet

[ Why it matters ]Priority signals

  • Critical severity: CVSS 9.6

[ Description ]Official description

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

  • CERT-FRCERTFR-2026-AVI-1326

    Multiple vulnerabilities in Palo Alto Networks products Translated from French

    Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…

    CVE-2026-87464CVE-2026-87646CVE-2026-87445+458 more CVEs
  • CERT-FRCERTFR-2026-AVI-1268

    Multiple vulnerabilities in Google Chrome Translated from French

    Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

    CVE-2026-106298CVE-2026-106348CVE-2026-106208+244 more CVEs
  • BSI CERT-BundWID-SEC-2026-3761

    Google Chrome / Microsoft Edge: Multiple vulnerabilities Translated from German

    Risk highCVE-2026-106408CVE-2026-106180CVE-2026-106247+244 more CVEs

[ References ]References