CVE-2026-106192

Analyzed Analyzed - Analysis Complete

Information Disclosure in Google Chrome on iOS

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Chrome

Description

Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106192

EUVD

EUVD-2026-93614

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 155.0.8059.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information leak in Mobile Google Chrome on iOS versions prior to 155.0.8059.39. A local attacker could exploit physical access to obtain sensitive information from the device.

Detection Guidance

This vulnerability involves an information leak in Google Chrome on iOS due to physical access. Detection primarily requires verifying the Chrome version on iOS devices. Check if the installed version is prior to 155.0.8059.39. No specific commands are provided for detection beyond version verification.

Impact Analysis

If you have an affected version of Chrome on iOS, an attacker with physical access to your device could steal sensitive data. The impact is limited to local attacks and does not allow remote exploitation.

Compliance Impact

This vulnerability involves an information leak via physical access, which could expose sensitive data. Such leaks may violate GDPR's data protection principles or HIPAA's confidentiality requirements if personal or health data is involved.

Mitigation Strategies

Update Google Chrome on all iOS devices to version 155.0.8059.39 or later to mitigate the information leak vulnerability. Ensure automatic updates are enabled to prevent future occurrences.

Hi! I’m here to help you understand CVE-2026-106192. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70