Authorization Bypass in Google Chrome Affects Web Security
CVE-2026-120930

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
3 November 2026

What is CVE-2026-120930?

A vulnerability in Google Chrome allows attackers to bypass web origin policy due to incorrect authorization management in the Blink rendering engine. Attackers could exploit this flaw through a specially crafted HTML page, potentially leading to unauthorized access to sensitive information. Users are encouraged to update to version 156.0.8078.47 or later to protect against this issue.

Affected Version(s)

Chrome 156.0.8078.47

References

https://chromereleases.googleblog.com/2026/10/stable-chan...
https://issues.chromium.org/issues/515948871

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.