Verified

CVE-2026-106416: Chrome 155.0.8059.39 to before 155.0.8059.39

Affected technology

Chrome · 155.0.8059.39 to before 155.0.8059.39
Google

Description’s affected range: prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 2026-10-07 02:35:21.813108+00:00

CWE: CWE-94
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-07 02:34:12.333111+00:00 UTC
GitHub Advisory Database · Source record · observed 2026-10-07 02:36:03.777225+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-106416.html