Vulnerability record/PUBLISHED/Published Nov 11, 2026 22:39:04 UTC
CVE-2026-126850
Incorrect authorization in SiteIsolation in Google Chrome on on Android prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityChrome
Last updatedNov 11, 2026 22:39:04 UTC
PublishedNov 11, 2026 22:39:04 UTC
ReservedNov 11, 2026 22:08:08 UTC