Authorization Bypass in Google Chrome Affected by Crafted HTML Pages
CVE-2026-84332

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
1 September 2026

What is CVE-2026-84332?

A security flaw in Google Chrome versions prior to 152.0.7977.75 allows unauthorized access due to improper authorization in SiteSettings. This vulnerability can be exploited by remote attackers using a specially crafted HTML page, enabling them to bypass system access restrictions and carry out malicious activities.

Affected Version(s)

Chrome 152.0.7977.75

References

https://chromereleases.googleblog.com/2026/09/stable-chan...
https://issues.chromium.org/issues/514489238

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.