Vulnerability record/PUBLISHED/Published Nov 11, 2026 22:39:04 UTC

CVE-2026-126855

Missing authorization in ImageCapture in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Base scoreN/A/ 10

SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthorityChrome

Last updatedNov 11, 2026 22:39:04 UTC

PublishedNov 11, 2026 22:39:04 UTC

ReservedNov 11, 2026 22:08:20 UTC