CVE-2026-126896

Vendor

Google

Product

Chrome

EPSS

0.003 (p21)

Weakness

CWE-862

Exposure class

Browser

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 51
   Advisory MSRC 12h ago

   Chromium CVE-2026-126896: Missing authorization

   This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.

   Fix available CVE-2026-126896 Microsoft Google
2. 29
   CVE NVD 2d ago

   Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page.

   Missing authorization in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

   CVE-2026-126896 Google
3. 26
   Chrome release Chrome Releases 2d ago

   Stable Channel Update for Desktop

   The Stable channel has been updated to 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log . Security Fixes…

   CVE-2026-126885CVE-2026-126895CVE-2026-126879+57 more Google