CVE-2026-106371

Summary

This flaw in Google Chrome on Android allows a remote attacker to obtain sensitive information via a crafted HTML page due to incorrect authorization in the Transactions Platform. This matters because it can lead to unauthorized data access.

Exploitability

Exploitation is moderately difficult as it requires a crafted HTML page and the victim to interact with it. The attacker must have the ability to deliver the crafted content to the victim.

Blast radius

If exploited, the impact is high as it could lead to the exposure of sensitive information, potentially compromising user data and privacy.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.