CVE-2026-106195
published 2026-10-06CVE-2026-106195: Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via…
PriorityP355critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.31%
22.5th percentile
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 155.0.8059.39 | 155.0.8059.39 | |
| chrome | >= 155.0.8059.39 < 155.0.8059.39 | 155.0.8059.39 | |
| chrome_desktop | — | — |
CVSS provenance
nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
vendor_redhat9.1CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
chromium-browser: Incorrect authorization in Chromoting
vendor_redhat·2026-10-06·CVSS 9.1
CVE-2026-106195 [CRITICAL] CWE-863 chromium-browser: Incorrect authorization in Chromoting
chromium-browser: Incorrect authorization in Chromoting
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
An incorrect authorization flaw was found in the Chromoting component of the Chromium browser.
Upstream bug(s):
https://issues.chromium.org/issues/553930843
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Chrome
Stable Channel Update for Desktop: CVE-2026-106195
vendor_chrome·2026-10-06·CVSS 5.4
CVE-2026-106195 [LOW] Stable Channel Update for Desktop: CVE-2026-106195
Stable Channel Update for Desktop
CVE-2026-106195: Incorrect authorization in Chromoting. Reported by Google on 2026-08-28 [N/A][ 554556423 ] Low CVE-2026-106316: UI misrepresentation in Chromoting
Reported by Google on 2026-08-29 [N/A][ 554874487 ] Low CVE-2026-106385: Race condition in Chromoting
Severity: low
VulDB
Google Chrome up to 154.0.8037.97 Chromoting access control (WID-SEC-2026-3761)
vuldb·2026-10-11·CVSS 9.1
CVE-2026-106195 [CRITICAL] Google Chrome up to 154.0.8037.97 Chromoting access control (WID-SEC-2026-3761)
A vulnerability classified as critical was found in Google Chrome. This vulnerability affects unknown code of the component Chromoting. Such manipulation leads to improper access controls.
This vulnerability is listed as CVE-2026-106195. The attack may be performed from remote. There is no available exploit.
Upgrading the affected component is advised.
GHSA
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic.
ghsa_unreviewed·2026-10-06
CVE-2026-106195 CWE-863 Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic.
Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium security severity: Low)
No detection rules found.
No public exploits indexed.
2026-10-06
Published