CVE-2026-106243

Medium5.3 Published on Oct 6, 2026

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: High)

CVSS score5.3 / 10CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness type (CWE)CWE-459

Vendorsgoogle

Affected products

Vendors	Product	Versions
google	chrome	< 155.0.8059.39

Vulnerabilities

Chrome 155 Fixes 247 Security Issues, With Critical Bugs Reaching Beyond the Sandbox

Google's Chrome 155 desktop update fixes 247 security issues, including critical use-after-free flaws enabling code execution outside sandbox.

Oct 7, 202612:35 5 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

CVE-2026-106243

Affected products

Related articles

Chrome 155 Fixes 247 Security Issues, With Critical Bugs Reaching Beyond the Sandbox

Audience measurement