What is GHSA-hfwr-37rr-cxjv?

GHSA-hfwr-37rr-cxjv is a security advisory published by GitHub Security Advisories with unknown severity. Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...

Which CVE IDs does GHSA-hfwr-37rr-cxjv cover?

GHSA-hfwr-37rr-cxjv covers the following CVE IDs: CVE-2026-106353. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hfwr-37rr-cxjvunknown

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-106353 →

📋 Description

Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-installed app. (Chromium security severity: Low)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-106353
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
https://issues.chromium.org/issues/502078791
https://github.com/advisories/GHSA-hfwr-37rr-cxjv