Missing Authorization in Media for Google Chrome on Windows
CVE-2026-106355

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 October 2026

What is CVE-2026-106355?

A vulnerability exists in Google Chrome on Windows prior to version 155.0.8059.39, where missing authorization in the Media component may permit a remote attacker to exploit the renderer process. This flaw could allow unauthorized access to sensitive information through a specially crafted HTML page, posing privacy risks for users.

Affected Version(s)

Chrome 155.0.8059.39

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/559777100

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.