CVE-2026-106228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39

Description A confused deputy issue in Google Lens allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do.

Recommendations Update Google Chrome to version 155.0.8059.39 or later.