Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page.

Timeline

Detection, updates, and resolution for this record.

1. Oct 6, 2026 · NIST NVD

   Detected

   Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

2. Oct 14, 2026 · NIST NVD

   Updated

   Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

Affected

• cpe google/chromeversion unspecified
• vendor Google Chromeversion unspecified

Sources

• CIRCL Vulnerability LookupCVE-2026-106350

  Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

  vulnerability.circl.lu
• CVE.orgCVE-2026-106350

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2026-106350

  30-day exploitation probability 0.2%

  first.org
• NIST NVDCVE-2026-106350

  Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

  nvd.nist.gov

References

• Release Notes · chromereleases.googleblog.com
• Permissions Required · issues.chromium.org