CVE-2026-106195

Incorrect authorization in Google Chrome's Chromoting on Mac allowed remote attackers to bypass system access restrictions via crafted network traffic.

A remote attacker could exploit this authorization flaw in Google Chrome on Mac to bypass system access restrictions, potentially leading to unauthorized access or data exposure. DIB organizations must ensure their endpoint security software and browsers are patched to prevent attackers from leveraging this vulnerability for lateral movement or data exfiltration. This failure highlights the ongoing risk of unpatched browser vulnerabilities even in enterprise environments.

Shame score — The vulnerability was responsibly disclosed with a low Chromium severity rating, but the critical NVD classification and remote exploitability still pose a significant compliance and exposure risk.