[ CVE-2026-76026 · Published 30 Oct 2026 ]
Vulnerability in Google Chrome
CVSS 8.8
EPSS <1%2 agency advisoriesNo fix listed yet
[ Description ]Official description
Origin validation error in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1422
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
BSI CERT-BundWID-SEC-2026-4244
Google Chrome / Microsoft Edge: Multiple vulnerabilities allow an unspecified attack Translated from German
[ References ]References
- chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.htmlRelease NotesVendor Advisory
- issues.chromium.org/issues/567673200Permissions Required