# CVE-2026-106295: Chromium CVE-2026-106295: Incorrect authorization

CVE-2026-106295 is fixed in 9 products on 3 platforms, first by Microsoft Edge Dev 156.0.4285.0, released September 17, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-106295
- Priority: Routine
- CVSS: 4.2 (Moderate)
- EPSS: 0.0017
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 6, 2026
- Weakness: Incorrect Authorization
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-106295

## Description

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Google Chrome (EXE) | 155.0.8059.40 | [Google Chrome (EXE) 155.0.8059.40](https://patchblox.com/security/data/fix/windows-app/google.chrome.exe-155.0.8059.40.md) | Oct 6, 2026 |
| Windows apps | Google Chrome Beta (EXE) | 156.0.8078.4 | [Google Chrome Beta (EXE) 156.0.8078.4](https://patchblox.com/security/data/fix/windows-app/google.chrome.beta.exe-156.0.8078.4.md) | Sep 30, 2026 |
| Windows apps | Google Chrome Dev (EXE) | 156.0.8063.3 | [Google Chrome Dev (EXE) 156.0.8063.3](https://patchblox.com/security/data/fix/windows-app/google.chrome.dev.exe-156.0.8063.3.md) | Sep 18, 2026 |
| Windows apps | Microsoft Edge | 155.0.4283.45 | [Microsoft Edge 155.0.4283.45](https://patchblox.com/security/data/fix/windows-app/microsoft.edge-155.0.4283.45.md) | Oct 8, 2026 |
| Windows apps | Microsoft Edge Beta | 156.0.4314.8 | [Microsoft Edge Beta 156.0.4314.8](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.beta-156.0.4314.8.md) | Oct 6, 2026 |
| Windows apps | Microsoft Edge Dev | 156.0.4285.0 | [Microsoft Edge Dev 156.0.4285.0](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.dev-156.0.4285.0.md) | Sep 17, 2026 |
| Windows apps | Microsoft Edge WebView2 Runtime | 155.0.4283.45 | [Microsoft Edge WebView2 Runtime 155.0.4283.45](https://patchblox.com/security/data/fix/windows-app/microsoft.edgewebview2runtime-155.0.4283.45.md) | Oct 8, 2026 |
| macOS | Google Chrome | 155.0.8059.40 | [Google Chrome 155.0.8059.40](https://patchblox.com/security/data/fix/macos/com.google.chrome-155.0.8059.40.md) | Oct 6, 2026 |
| macOS | Microsoft Edge | 155.0.4283.45 | [Microsoft Edge 155.0.4283.45](https://patchblox.com/security/data/fix/macos/com.microsoft.edgemac-155.0.4283.45.md) | Oct 7, 2026 |
| Linux | chromium Debian 12.15 (bookworm) | 155.0.8059.39-1~deb12u1 | [DEBIAN-CVE-2026-106295](https://patchblox.com/security/data/fix/linux/debian-cve-2026-106295.md) | Oct 12, 2026 |
| Linux | chromium Debian 13.5 (trixie) | 155.0.8059.39-1~deb13u1 | [DEBIAN-CVE-2026-106295](https://patchblox.com/security/data/fix/linux/debian-cve-2026-106295.md) | Oct 12, 2026 |
| Linux | chromium Debian 14 | 155.0.8059.39-1 | [DEBIAN-CVE-2026-106295](https://patchblox.com/security/data/fix/linux/debian-cve-2026-106295.md) | Oct 12, 2026 |
| Linux | chromium opensuse-leap 16.0 | 155.0.8059.84-bp160.1.1 | [OPENSUSE-SU-2026:22124-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22124-1.md) | Nov 7, 2026 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo