CVE-2026-106274: Incorrect reference resolution in Google Chrome

This vulnerability in Google Chrome on Mac platforms involves incorrect reference resolution within the browser. An attacker can exploit this by crafting a malicious HTML page and leveraging social engineering techniques to extract sensitive information from the user. The issue affects versions prior to 155.0.8059.39 and has been assigned a high CVSS score of 8.8, indicating significant confidentiality, integrity, and availability impacts. The vulnerability was publicly disclosed with a vendor advisory available from Google.

Successful exploitation can lead to the disclosure of sensitive information to a remote attacker without requiring privileges, but user interaction (UI) is necessary. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

A fix is available in Google Chrome version 155.0.8059.39. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for details: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html