CVE-2026-106294

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: Chrome

Description

Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106294

EUVD

EUVD-2026-93646

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 155.0.8059.39 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-459	The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

Executive Summary

This vulnerability is a flaw in Chromoting (Google Chrome's remote desktop feature) on Mac systems. It allows a remote attacker to bypass system access restrictions by sending specially crafted network traffic. The issue stems from incomplete cleanup during the remote connection process.

Detection Guidance

This vulnerability is specific to Google Chrome on Mac prior to version 155.0.8059.39. Detection involves checking the installed Chrome version. Run 'google-chrome --version' in Terminal. If the version is below 155.0.8059.39, the system is vulnerable.

Impact Analysis

An attacker could exploit this to gain unauthorized access to your Mac system through Chromoting. This might allow them to view or control your system remotely without proper authorization. However, the severity is rated as Low by Chromium.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it involves a low-severity issue in Chromoting on Mac with no evidence of data exposure or unauthorized access to sensitive information.

Mitigation Strategies

Update Google Chrome to version 155.0.8059.39 or later to address the incomplete cleanup issue in Chromoting.

Hi! I’m here to help you understand CVE-2026-106294. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70