Authorization Bypass Vulnerability in Google Chrome
CVE-2026-118333

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118333?

A vulnerability in Google Chrome enables a remote attacker to bypass the web origin policy through the use of a crafted HTML page. This flaw affects versions of Chrome prior to 156.0.8078.73, creating potential risks for users by allowing unauthorized actions that could compromise security. It is crucial for users to update to the latest version to mitigate these risks.

Affected Version(s)

Chrome 156.0.8078.73

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/571147583

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.