CVE-2026-106320

Description

Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

Is your site exposed to CVE-2026-106320?

Run a free security scan — no signup, results in seconds.

Weakness Type (CWE)

CWE-672 CWE-672

References

Other References

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html https://issues.chromium.org/issues/553929758

Frequently Asked Questions

What is CVE-2026-106320? +

Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

How do I check if I'm vulnerable to CVE-2026-106320? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-2517

Reference to Expired Domain Vulnerability in OpenText™ ArcSight Enterprise Security Manager.

CVE-2026-106345

Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the …

CVE-2026-96589

When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as …

CVE-2026-106310

Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the …

CVE-2026-106339

Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the …

CVE-2025-22149

JWK Set (JSON Web Key Set) is a JWK and JWK Set Go implementation. Prior to 0.6.0, the project's provided …