CVE-2026-106220

Summary

A flaw in Google Chrome prior to 155.0.8059.39 allows remote attackers to leak sensitive information via a crafted HTML page, posing a high risk due to the potential exposure of passwords and other sensitive data.

Exploitability

Exploitation is moderately difficult requiring a crafted HTML page and a user to visit it. The attacker must have the ability to control the HTML content and the user's browsing environment.

Blast radius

If exploited, the impact could be severe, as it could lead to the exposure of sensitive information such as passwords, potentially compromising user accounts and data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.