Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5138 articles · 252861 vulns · 36/41 feeds (7d)
← Back to list
9.6
CVE-2026-106414PATCHED
google · chrome

CVE-2026-106414: Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveragi

Description

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Products

VendorProductVersions
googlechrome155.0.8059.39

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
appleiphone_oscve_cpe95%
googlechromecert_advisory90%

References

  • https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
  • https://issues.chromium.org/issues/504223609

Related News (5 articles)

Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft Edge (27 octobre 2026)
→ No new info (linked only)
Tier B
CERT-FR13d ago
Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)
→ No new info (linked only)
Tier B
BSI Advisories20d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier B
CERT-FR21d ago
Multiples vulnérabilités dans Google Chrome (07 octobre 2026)
→ No new info (linked only)
Tier C
VulDB21d ago
CVE-2026-106414 | Google Chrome up to 154.0.8037.97 input validation
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.6 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited❌ No
Patch available
155.0.8059.39
CWECWE-20
PublishedOct 6, 2026
Last enriched21d ago
Trending Score47
Source articles5
Independent3
Info Completeness4/14
Missing: vendor, product, versions, cvss, epss, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

NONECVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Trending: 78
CRITICALCVE-2026-102331
CVE-2026-102331: Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially
Trending: 50
CRITICALCVE-2026-102309
CVE-2026-102309: Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code
Trending: 47
CRITICALCVE-2026-102304
CVE-2026-102304: Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code
Trending: 47
CRITICALCVE-2026-102306
CVE-2026-102306: Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arb
Trending: 47

Pin to Dashboard

Verification

State: verified
Confidence: 100%

Vulnerability Timeline

CVE Published
Oct 6, 2026
Discovered by ZDM
Oct 6, 2026
Patch Available
Oct 7, 2026