Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web… (CVE-2026-106418)

CVE-2026-106418 describes a missing authorization flaw in the Network module of Google Chrome before version 155.0.8059.39. This vulnerability enables a remote attacker, through social engineering and crafted network traffic, to bypass the web origin policy, potentially compromising the integrity of web content. The vulnerability is rated with a CVSS 3.1 score of 6.5 (medium severity), indicating that exploitation requires user interaction but no privileges or complex conditions. No official patch or vendor advisory details are provided in the input data.

The vulnerability allows an attacker to bypass the web origin policy, which can lead to unauthorized actions affecting the integrity of web content viewed in the browser. There is no impact on confidentiality or availability reported. Exploitation requires user interaction (social engineering). No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor official Google Chrome security advisories for updates and apply any forthcoming patches promptly. Until a fix is confirmed, exercising caution with unsolicited network traffic and social engineering attempts is advisable.