CVE-2026-106241

Summary

This flaw allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page, leveraging social engineering on Google Chrome for Android versions prior to 155.0.8059.39.

Exploitability

Exploitation is moderately difficult as it requires social engineering to trick the user into opening a crafted HTML page.

Blast radius

If exploited, the attacker could potentially gain full control over the device, leading to data theft, system compromise, and other severe consequences.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.