CVE-2026-76019

Incorrect authorization in Chrome's Workers component allows a remote attacker with a compromised renderer process to bypass the web origin policy via a crafted HTML page, requiring social engineering. Fixed in Chrome 151.0.7922.173 (desktop). No exploitation details are provided in the documents.