CVE-2026-106403

Summary

Chrome's accessibility feature had incorrect authorization checks that allowed a compromised renderer process to bypass site isolation and gain access to other origins. This creates a path for attackers to escape from sandboxed pages and access data from different websites.

Exploitability

Exploitation requires compromising a renderer process first, then crafting a malicious HTML page that triggers the authorization bypass, making it moderately difficult but possible with a multi-stage attack approach.

Blast radius

If exploited, this vulnerability could allow attackers to access sensitive data from other websites, potentially leading to cross-site data theft and session hijacking across multiple domains.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later to remediate this authorization bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.