Missing Authorization Vulnerability in Google Chrome

CVE-2026-93378

What is CVE-2026-93378?

A vulnerability in Google Chrome arises from missing authorization within the Storage component. This flaw could allow a remote attacker, who has compromised the renderer process, to bypass site isolation by utilizing a specially crafted PDF file. Such an exploitation could potentially lead to unauthorized access to sensitive information, making it crucial for users to ensure they are running the latest version of Google Chrome to mitigate risks associated with this vulnerability.

References