CVE-2026-106308

Summary

This flaw involves incorrect reference resolution in Google Chrome's Autofill feature on Android versions prior to 155.0.8059.39, allowing a remote attacker to obtain sensitive information through social engineering.

Exploitability

Exploitation requires a crafted HTML page and social engineering, making it moderately difficult to execute.

Blast radius

If exploited, the attacker could obtain sensitive information from the victim, potentially leading to data breaches or other privacy violations.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.