CVE-2026-106427

NONE
Updated Oct 06, 2026
Google
Parameter Value
Affected Versions before 155.0.8059.39
Type CWE-441
Vendor Google
Public PoC No

Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Low)

Weakness Type (CWE)