CVE-2026-106307: Incorrect authorization in Google Chrome

CVE-2026-106307 is an authorization bypass vulnerability in Google Chrome's Network component affecting versions before 155.0.8059.39. A remote attacker who has already compromised the renderer process can exploit this flaw by delivering a crafted HTML page to bypass system access restrictions. The vulnerability is classified as medium severity by the Chromium security team. The vendor has released an update in Chrome version 155.0.8059.39 that addresses this issue.

Successful exploitation allows an attacker with control over the renderer process to bypass system access restrictions, potentially increasing their privileges or access beyond intended limits within the browser environment. This could facilitate further malicious actions within the compromised system context.

Users and administrators should update Google Chrome to version 155.0.8059.39 or later, where this vulnerability has been fixed. No additional mitigations are indicated by the vendor advisory.