CVE-2026-84355: Google Chrome vulnerability

Q: What level of access does an attacker need to exploit this issue?

The attacker must already have compromised the Chrome renderer process. They can then use a crafted HTML page to bypass the web origin policy.

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update to 152.0.7977.75 or a later version.

Published Sep 1, 2026

Updated

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<152.0.7977.75

Event History

Sep 1, 2026

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already have compromised the Chrome renderer process. They can then use a crafted HTML page to bypass the web origin policy.

Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update to 152.0.7977.75 or a later version.