What is GHSA-6272-xr6x-xvm8?

GHSA-6272-xr6x-xvm8 is a security advisory published by GitHub Security Advisories with Medium severity. Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155...

Which CVE IDs does GHSA-6272-xr6x-xvm8 cover?

GHSA-6272-xr6x-xvm8 covers the following CVE IDs: CVE-2026-106361. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6272-xr6x-xvm8?

GHSA-6272-xr6x-xvm8 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-6272-xr6x-xvm8MediumCVSS 6.5

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-106361 →

📋 Description

Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-106361
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
https://issues.chromium.org/issues/513781133
https://github.com/advisories/GHSA-6272-xr6x-xvm8