What is GHSA-6684-cx37-g8xr?

GHSA-6684-cx37-g8xr is a security advisory published by GitHub Security Advisories with Critical severity. Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed...

Which CVE IDs does GHSA-6684-cx37-g8xr cover?

GHSA-6684-cx37-g8xr covers the following CVE IDs: CVE-2026-106323. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6684-cx37-g8xr?

GHSA-6684-cx37-g8xr has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-6684-cx37-g8xrCriticalCVSS 9.6

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-106323 →

📋 Description

Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-106323
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
https://issues.chromium.org/issues/553114676
https://github.com/advisories/GHSA-6684-cx37-g8xr