GHSA-2mpf-g8rv-jrxfunknown

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote...

Published
October 14, 2026
Last Modified
October 14, 2026

🔗 CVE IDs covered (1)

📋 Description

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (Chromium security severity: High)

🔗 References (4)