CVE-2026-84332: Google Chrome vulnerability

Q: What must an attacker do to exploit this issue?

The attacker must induce the target to load a crafted HTML page. The issue can then be used to bypass system access restrictions because of incorrect authorization in SiteSettings.

Q: Which Chrome versions need to be remediated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update Chrome to 152.0.7977.75 or a later version.

Published Sep 1, 2026

Updated

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<152.0.7977.75

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 152.0.7977.75

Event History

Sep 1, 2026

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

DescriptionWeakness

Frequently Asked Questions

What must an attacker do to exploit this issue?

The attacker must induce the target to load a crafted HTML page. The issue can then be used to bypass system access restrictions because of incorrect authorization in SiteSettings.

Which Chrome versions need to be remediated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update Chrome to 152.0.7977.75 or a later version.