All news & advisories

Medium October 7, 2026

CVE-2026-106420: Security Advisory

CVE-2026-106420 CVSS 5.4

Who it affects: See the summary below.
What to do: Apply the vendor's update in your next patch window.

CVE-2026-106420

Severity: Medium (CVSS 5.4)
KEV Status: Not exploited in the wild

Affected Products

Google Chrome on Windows versions prior to 155.0.8059.39

Vulnerability Details

Incorrect calculation in Chrome’s API allows remote attackers to spoof UI elements through social engineering with a crafted Chrome extension.

Remediation

Update Google Chrome to version 155.0.8059.39 or later on Windows systems.

References

Data as of October 7, 2026. Sources: nvd.nist.gov, chromereleases.googleblog.com, issues.chromium.org. Figures are pulled from public vendor and security data and refreshed automatically.

Back to all news & advisories