Authorization Flaw in Google Chrome Affects User Data Access
CVE-2026-126854

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126854?

An incorrect authorization vulnerability in Google Chrome versions prior to 157.0.8103.78 could enable remote attackers to gain unauthorized access to cross-origin data by exploiting a specially crafted HTML page. This issue highlights the importance of rigorous authorization processes in web browsers to protect user data.

Affected Version(s)

Chrome 157.0.8103.78

References

https://chromereleases.googleblog.com/2026/11/stable-chan...
https://issues.chromium.org/issues/578655807

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.