VULNERABILITY INTELLIGENCE

CVE-2026-106361

CVSS score6.5 MEDIUM

EPSS probability0.28%

CISA KEVNot currently listed

Published2026-10-06

Last modified2026-10-14

Description

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)