Incorrect Authorization Vulnerability in Google Chrome
CVE-2026-126872

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126872?

A vulnerability in Google Chrome's FileSystem component prior to version 157.0.8103.78 allows remote attackers to exploit incorrect authorization. By leveraging social engineering techniques, attackers can execute arbitrary code outside the browser's sandbox environment via specially crafted HTML pages. This issue highlights significant security concerns related to user interaction and content delivery over the web.

Affected Version(s)

Chrome 157.0.8103.78

References

https://chromereleases.googleblog.com/2026/11/stable-chan...
https://issues.chromium.org/issues/577376424

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.