CVE-2026-106266

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39

Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass the web origin policy. This is achieved by using a crafted HTML page to gain access to a privileged page. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do.

Recommendations Update Google Chrome to version 155.0.8059.39 or later.