CVE-2026-106327: Incorrect authorization in Google Chrome

CVE-2026-106327 is an authorization bypass vulnerability in the core of Google Chrome versions before 155.0.8059.39. It enables a remote attacker, who has already compromised the renderer process, to circumvent system access controls by delivering a specially crafted HTML page. This flaw affects the browser's security model by allowing unauthorized access beyond intended restrictions.

Successful exploitation allows an attacker with control over the renderer process to bypass system access restrictions, potentially leading to unauthorized actions or access within the affected system environment. The vulnerability is considered high severity by the Chromium security team, indicating significant risk if exploited.

A fixed version is available in Google Chrome 155.0.8059.39. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html for details.