CVE-2026-106323

Summary

This flaw allows a remote attacker to execute arbitrary code outside the sandbox in Chrome for iOS by leveraging social engineering, posing a critical risk.

Exploitability

Exploitation is moderately difficult requiring social engineering and a crafted HTML page. The attacker must trick the user into opening the malicious page.

Blast radius

If exploited, the attacker could gain full control over the device, leading to data theft, system compromise, and potential loss of privacy.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.