Missing Authorization Vulnerability in Google Chrome

CVE-2026-126855

What is CVE-2026-126855?

A vulnerability in Google Chrome allows attackers to exploit the renderer process due to missing authorization checks in ImageCapture. This can lead to unauthorized access and manipulation of web content through a specially crafted HTML page, circumventing the web origin policy and exposing users to potential security risks. Users are advised to update to version 157.0.8103.78 or later to mitigate this issue.

References