CVE-2026-91746

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47

Description An integer overflow in the Compositing component allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Cross-origin data access occurs when a script on one origin accesses data from a different origin, bypassing the Same-Origin Policy (SOP), which is a security mechanism that restricts how a document or script loaded by one origin can interact with a resource from another origin.

Recommendations Update Google Chrome to version 153.0.8010.47 or later.