HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-110144 — Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.80...

·Source: NIST NVD

Updated:

Executive Summary

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

Analysis

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High) CVSS Score: 8.6. Published: 2026-10-13T22:17:34.203.

Indicators of Compromise (1)

CVE (1)
CVE-2026-110144
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 13, 2026. Verified by: NIST.

Related Threats

LOWAi

How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane

Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according to a new Noma Security finding. Noma’s researchers found a vulnerability affecting Anthropic’s Claude Code Desktop app that could allow malicious JavaScript embedded in an HTML file to execute without further user inter

CSO Online
CRITICALZero Day

Patch Tuesday - October 2026

Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday , including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft

CVE-2026-96951CVE-2026-108398
Rapid7
CRITICALVulnerability

NVD CRITICAL: CVE-2026-106237 — Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed ...

Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-106237
NIST NVD