Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-106241: Chrome Android before 155.0.8059.39 can run malicious code
CVE-2026-106241 · published 4 days ago
Summary
Google Chrome on Android and Debian’s Chromium version earlier than 155.0.8059.39 can be tricked by a specially crafted web page to run code outside the browser’s protected area. Update the browser to the latest version to stop this risk.
What to do
- Update google chrome to version 155.0.8059.39 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome | < 155.0.8059.39 | |
| Debian:12 | debian | chromium | All versions |
Original advisory text
DEBIAN-CVE-2026-106241
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
9.6
Critical
Type
CWE-863Incorrect Authorization
Timeline
Published6 Oct 2026
Updated8 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta