CVE-2026-106294

Summary

Chrome's remote desktop feature on Mac had incomplete cleanup routines that allowed attackers to bypass system access restrictions through crafted network traffic, potentially enabling unauthorized access to the user's system.

Exploitability

Exploitation appears moderately difficult requiring remote network access and crafting specific traffic patterns, with no preconditions mentioned for the vulnerability.

Blast radius

The impact could be significant as attackers could gain system-level access to Mac users running vulnerable Chrome versions, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome 155.0.8059.39 or later to remediate this incomplete cleanup vulnerability in Chromoting.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.