CVE-2026-106387

Summary

This flaw allows a remote attacker to obtain sensitive information via social engineering, leveraging a crafted HTML page on an affected version of Google Chrome for iOS.

Exploitability

Exploitation requires social engineering and a crafted HTML page, making it moderately difficult to execute.

Blast radius

If exploited, the attacker could obtain sensitive information from the victim, potentially leading to data breaches or other security incidents.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.