CVE-2026-106344
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social en…
Published Oct 6, 2026 · updated Oct 14, 2026 · Google Chrome
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 6, 2026 · NIST NVD
Detected
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Oct 14, 2026 · NIST NVD
Updated
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
Affected
- cpe google/chromeversion unspecified
- vendor Google Chromeversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-106344
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-106344
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-106344
30-day exploitation probability 0.2%
first.org - NIST NVDVulnerability recordCVE-2026-106344
Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
nvd.nist.gov