CVE-2026-106279

Published 6 October 2026 · tracked since 7 October 2026

Description

Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-106352 HIGH 8.8
• CVE-2026-106357 HIGH 8.8
• CVE-2026-106358 CRITICAL 9.6
• CVE-2026-106346 HIGH 8.8
• CVE-2026-106347 HIGH 8.8
• CVE-2026-106349 HIGH 8.8
• CVE-2026-106350 HIGH 8.8
• CVE-2026-106341 HIGH 8.8
• CVE-2026-106342 HIGH 8.8
• CVE-2026-106329 CRITICAL 9.6

→ Open the live CVE board · all tools