Improper State Validation in Autofill AI of Google Chrome on Android
CVE-2026-106343

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 October 2026

What is CVE-2026-106343?

A vulnerability in the Autofill AI feature of Google Chrome for Android prior to version 155.0.8059.39 can be exploited by remote attackers. This allows them to manipulate and spoof user interface elements by delivering specially crafted HTML content, potentially leading to deceptive user experiences. Users should ensure they are running the latest version of the browser to mitigate this issue.

Affected Version(s)

Chrome 155.0.8059.39

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/553317583

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.