CVE-2026-106344: Missing authorization in Google Chrome

CVE-2026-106344 is a vulnerability in Google Chrome's Permissions system affecting versions before 155.0.8059.39. It involves missing authorization checks that could be exploited by a remote attacker who has already compromised the renderer process. By leveraging social engineering and a crafted HTML page, the attacker could bypass system access restrictions. The vulnerability is classified as low severity by Chromium security.

An attacker with control over the renderer process and the ability to trick a user via social engineering could bypass system access restrictions. This could potentially allow unauthorized actions within the context of the compromised renderer process. However, the overall severity is low, indicating limited impact or difficulty in exploitation.

A fix is available in Google Chrome version 155.0.8059.39. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory for details: https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html