Description
Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-10-06
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Immediate Patch
AI Analysis

Impact

A confused‑deputy flaw was discovered in the SignIn component of Google Chrome for Android. By delivering a specially crafted HTML page, an attacker can trick Chrome into opening a privileged page that normally requires higher system permissions. This bypass of system access restrictions could allow malicious content to gain unauthorized access to sensitive data or perform privileged actions, and is classified as a critical‑severity issue.

Affected Systems

Google Chrome for Android versions earlier than 155.0.8059.39 are affected. The vulnerability originates from the SignIn module and impacts any device running these prior releases.

Risk and Exploitability

The CVE is rated critical with a CVSS score of 9.6. The EPSS score is < 1% and it is not listed in CISA’s KEV catalog. Because the flaw is exercised through a crafted web page, a remote attacker only needs to serve the malicious HTML to a vulnerable user’s device. The absence of a public exploit does not preclude future use, so the risk is considered high but actionable.

Generated by OpenCVE AI on October 8, 2026 at 19:00 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Chrome on Android to version 155.0.8059.39 or later.
  • Disable or restrict the delivery of untrusted or unknown web content that could trigger SignIn pages.
  • Apply enterprise policy settings to block access to privileged pages or disable the compromised SignIn functionality while awaiting a patch.

Generated by OpenCVE AI on October 8, 2026 at 19:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4833-1 chromium security update
Debian DSA Debian DSA DSA-6553-1 chromium security update
History

Sat, 10 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Title Chrome SignIn Confused Deputy Allows Privilege Escalation via Crafted Web Page chromium-browser: Confused deputy in SignIn
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 08 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Title Chrome SignIn Confused Deputy Allows Privilege Escalation via Crafted Web Page

Thu, 08 Oct 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

Thu, 08 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Title Confused Deputy Enables Bypass to Privileged Page in Chrome Android

Thu, 08 Oct 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Google android
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
Vendors & Products Google android
Metrics cvssV3_1

{'score': 7.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N'}

Wed, 07 Oct 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 06 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Title Confused Deputy Enables Bypass to Privileged Page in Chrome Android

Tue, 06 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Description Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-441
References

Subscriptions

Google Android Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-10-08T15:39:03.062Z

Reserved: 2026-10-06T16:30:24.759Z

Link: CVE-2026-106188

cve-icon Vulnrichment

Updated: 2026-10-08T15:37:19.371Z

cve-icon NVD

Status : Modified

Published: 2026-10-06T19:17:44.860

Modified: 2026-10-08T16:17:01.917

Link: CVE-2026-106188

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-06T18:41:24Z

Links: CVE-2026-106188 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-08T19:15:20Z

Weaknesses
  • CWE-441

    Unintended Proxy or Intermediary ('Confused Deputy')