What is GHSA-r8qr-v34r-jm34?

GHSA-r8qr-v34r-jm34 is a security advisory published by GitHub Security Advisories with Medium severity. Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...

Which CVE IDs does GHSA-r8qr-v34r-jm34 cover?

GHSA-r8qr-v34r-jm34 covers the following CVE IDs: CVE-2026-106296. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r8qr-v34r-jm34?

GHSA-r8qr-v34r-jm34 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

GHSA-r8qr-v34r-jm34MediumCVSS 5.4

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a...

Vendor

GitHub Security Advisories

Published

October 6, 2026

Last Modified

October 7, 2026

🔗 CVE IDs covered (1)

CVE-2026-106296 →

📋 Description

Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-106296
https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
https://issues.chromium.org/issues/540078886
https://github.com/advisories/GHSA-r8qr-v34r-jm34