CVE-2026-91732

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47

Description Missing authorization in AppManifest allows a remote attacker who has compromised the renderer process and used social engineering to bypass the web origin policy through a crafted HTML page. The web origin policy is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin.

Recommendations Update Google Chrome to version 153.0.8010.47 or later.