CVE-2026-106274

Analyzed Analyzed - Analysis Complete

Incorrect Reference Resolution in Google Chrome on Mac

Publication date: 2026-10-06

Last updated on: 2026-10-08

Assigner: Chrome

Description

Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106274

EUVD

EUVD-2026-93860

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 155.0.8059.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-706	The product uses a name or reference to access a resource, but the name/reference resolves to a resource that is outside of the intended control sphere.

Attack-Flow Graph

Executive Summary

This vulnerability involves incorrect reference resolution in Google Chrome on Mac. A remote attacker could exploit it through social engineering to trick users into visiting a crafted HTML page, potentially accessing sensitive information.

Detection Guidance

This vulnerability involves incorrect reference resolution in Google Chrome on Mac. Detection primarily requires checking the Chrome version installed. Run 'google-chrome --version' in terminal to verify if it is below 155.0.8059.39. If so, the system is vulnerable.

Impact Analysis

An attacker could exploit this to obtain sensitive information from your system, such as personal data or credentials, by leveraging social engineering tactics to trick you into visiting a malicious page.

Compliance Impact

This vulnerability could potentially lead to unauthorized access to sensitive information, which may impact compliance with regulations like GDPR and HIPAA that require protection of personal and health data. The severity of the impact depends on the nature of the data exposed and the organization's specific compliance measures.

Mitigation Strategies

Update Google Chrome to version 155.0.8059.39 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-106274. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70