Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-106237: Google Chrome may let a site read data from other sites
CVE-2026-106237 · published 3 days ago
Summary
Versions of Google Chrome and the Chromium browser on Debian released before 155.0.8059.39 can be tricked by a specially crafted web page to bypass the browser’s isolation between sites. This could allow a remote attacker to see information from other sites a user visits. Update the browser to the latest version to close the gap.
What to do
- Update google chrome to version 155.0.8059.39 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome | < 155.0.8059.39 | |
| Debian:12 | debian | chromium | All versions |
Original advisory text
DEBIAN-CVE-2026-106237
Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
9.6
Critical
Type
CWE-200Information Exposure
Timeline
Published6 Oct 2026
Updated10 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta