CVE-2026-106425

NONE
Updated Oct 06, 2026
Google
Parameter Value
Affected Versions before 155.0.8059.39
Type CWE-862 (Missing Authorization)
Vendor Google
Public PoC No

Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)