CVE-2026-106196

Summary

A missing authorization flaw in Google Chrome's navigation handling on iOS allowed remote attackers to bypass web origin policies and access privileged pages through crafted HTML content. This represents a significant security gap that could enable unauthorized access to sensitive web resources.

Exploitability

Exploitation requires a victim to visit a malicious webpage, making it moderately difficult but potentially effective in phishing campaigns or compromised websites.

Blast radius

The flaw affects all iOS users running Chrome versions prior to 155.0.8059.39, potentially exposing millions of users to unauthorized access to privileged web applications and data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome for iOS version 155.0.8059.39 or later

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.