anonhaven

CVE-2026-106422

NONE
Updated Oct 06, 2026
Google
Parameter Value
Affected Versions before 155.0.8059.39
Type CWE-863 (Incorrect Authorization)
Vendor Google
Public PoC No

Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Weakness Type (CWE)

CWE-863 Incorrect Authorization

References 2

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop…
chrome-cve-admin@google.com
https://issues.chromium.org/issues/519458746
chrome-cve-admin@google.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-106427

Google

None

CVE-2026-106425

Google

None

CVE-2026-106424

Google

None

CVE-2026-106420

Google

None

CVE-2026-106418

Google

None