CVE-2026-106301

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39

Description A confused deputy issue in Contextual Tasks allows a remote attacker who has compromised the renderer process to bypass system access restrictions to reach a privileged page by using a crafted HTML page. A confused deputy is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to do.

Recommendations Update Google Chrome to version 155.0.8059.39 or later.