Improper access control in Google Chromium - CVE-2026-118337
Published: October 28, 2026
Vulnerability identifier: #VU158293
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-118337
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass access restrictions and potentially gain unauthorized access to protected resources.
The vulnerability exists due to improper access control in the Forms component of Google Chrome when enforcing access restrictions. A remote attacker can exploit insufficient access checks to potentially access resources that should be restricted.
Affected software
Google Chromium
Google Chrome
Google Chrome
How to mitigate CVE-2026-118337
Install security update from vendor's website.
Google Chromium - update to 156.0.8078.73
Google Chrome - update to 156.0.8078.73
Google Chrome - update to 156.0.8078.73