CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 155.0.8059.39 are vulnerable due to inadequate authorization in Google Lens, enabling remote attackers to access cross-origin data through a specially crafted HTML page. This flaw poses a medium security risk, particularly for organizations that utilize Google Chrome for web-based applications and services. Users and administrators should prioritize updating to the latest version to mitigate potential data exposure risks.
CVE
CVE-2026-106224
Severity
LOW
CVSS
3.1
EPSS
0.21%
Chrome
Original NVD Description
Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)