Vulnerabilities

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain…

Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google, Apple

Product

chrome, chromium, ios

EPSS

0.004 (p29)

Exposure class

Browser, Mobile OS

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-106203 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 36
   Advisory MSRC 15d ago

   Chromium CVE-2026-106203: Incomplete cleanup

   Fix available CVE-2026-106203 Microsoft Google
2. 11
   CVE NVD 25d ago

   Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical…

   CVE-2026-106192 Google Apple
3. 17
   CVE NVD 25d ago

   Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web…

   CVE-2026-106189 Google Apple
4. 25
   Chrome release Chrome Releases 25d ago

   Stable Channel Update for Desktop

   CVE-2026-106382CVE-2026-106197CVE-2026-106358+244 more Google