CVE-2026-106363

Summary

Chrome's FullScreen API had a missing authorization check that allowed attackers with compromised renderer processes to bypass system access restrictions through crafted HTML pages, potentially enabling unauthorized access to system resources.

Exploitability

Exploitation requires compromising the renderer process and leveraging social engineering, making it moderately difficult but possible for attackers who already have initial access to the browser.

Blast radius

If exploited, this vulnerability could allow attackers to gain unauthorized access to system resources and potentially escalate privileges across multiple Chrome instances.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later to remediate this authorization bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.