CVE-2026-106216
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 06, 2026
Vendor
unknown
Description
Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)