CVE-2026-93378

Summary

Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: Medium)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome153.0.8010.52 < 153.0.8010.52affected

Weaknesses

  • CWE-862: Missing authorization

References