CVE-2026-106214

Awaiting Analysis Awaiting Analysis - Queue

Information Leak in Google Chrome Proxy on Windows

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Chrome

Description

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106214

EUVD

EUVD-2026-93810

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 155.0.8059.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information leak in the Proxy component of Google Chrome on Windows. It allows an attacker on the same network to access sensitive data by manipulating network traffic. The issue affects Chrome versions before 155.0.8059.39.

Detection Guidance

This vulnerability involves an information leak in Google Chrome's Proxy on Windows. Detection may require monitoring network traffic for unusual data exposure or checking Chrome's version against the patched release (155.0.8059.39). Use Chrome's built-in update check or system package manager to verify version.

Impact Analysis

An attacker could intercept sensitive information transmitted through Chrome, such as login credentials or personal data. This may lead to privacy breaches or unauthorized access to accounts if exploited.

Compliance Impact

This vulnerability could result in unauthorized data exposure, violating GDPR's data protection principles or HIPAA's confidentiality requirements. Organizations may face compliance penalties if user data is compromised.

Mitigation Strategies

Update Google Chrome to version 155.0.8059.39 or later to address the information leak vulnerability.

Hi! I’m here to help you understand CVE-2026-106214. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70