OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-106420

MEDIUM · CVSS 5.4 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-10-06 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

A vulnerability in Google Chrome on Windows prior to version 155.0.8059.39 allows remote attackers to exploit incorrect API calculations, enabling them to spoof UI elements through crafted Chrome extensions. This could lead to social engineering attacks, potentially compromising user trust and data. Organizations using affected versions of Chrome should prioritize updates to mitigate the risk of exploitation.

CVE
CVE-2026-106420
Severity
MEDIUM
CVSS
5.4
EPSS
0.16%
Windows Chrome

Original NVD Description

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-106426 HIGH CVE-2026-106423 HIGH CVE-2026-106421 HIGH CVE-2026-106419 CRITICAL CVE-2026-106417 CRITICAL CVE-2026-106416 MEDIUM