Improper Access Control in Google Chrome Affects User Security
CVE-2026-118337

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118337?

An improper access control vulnerability in Google Chrome allows attackers to exploit web origin policy enforcement vulnerabilities using a specially crafted HTML page. This could lead to unauthorized actions being performed in the context of a user’s session, potentially compromising user data and security.

Affected Version(s)

Chrome 156.0.8078.73

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.