← Back

CVE-2026-106214

nvd nist
Published: Oct 6, 2026Modified: Oct 7, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.6 / Impact: 3.6
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

Affected (1)

Products: Google: Chrome
Google
1 product
Chrome
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Chrome
version < 155.0.8059.39
Running on/withPlatform Versions
Microsoft
Windows
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
ExploitIssue TrackingMitigation

Timeline

No history available yet.