Authorization Bypass in Google Chrome Browser
CVE-2026-91713

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
15 September 2026

What is CVE-2026-91713?

A missing authorization flaw in Google Chrome prior to version 153.0.8010.47 allows attackers to compromise the renderer process and spoof UI elements using specially crafted HTML pages. This vulnerability could enable malicious actors to alter the appearance of browser components, potentially leading to user deception and exploitation.

Affected Version(s)

Chrome 153.0.8010.47

References

https://chromereleases.googleblog.com/2026/09/stable-chan...
https://issues.chromium.org/issues/523715133

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.