Cyber Resilience

CVE-2026-3930

Auth Bypass in Google Chrome ≤ 146.0.7680.71

Auth Bypass
Published
11 March 2026
Modified
16 March 2026
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Score 0.0016 6th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-3930 is a medium-severity Authentication Bypass Using an Alternate Path or Channel (CWE-288) vulnerability in Google Chrome. Its CVSS base score is 5.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Drive-by Compromise (T1189); ranked at the 6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.

OWASP Top 10 for Web (2025)

A07:2025 Authentication Failures

EU & UK References

Vulnerability Data

Unsafe navigation in Navigation in Google Chrome on iOS prior to 146.0.7680.71 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)

CWE(s)
NVD-CWE-noinfoCWE-288

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1189 Drive-by Compromise Initial Access
Adversaries may gain access to a system through a user visiting a website over the normal course of browsing.
attack.mitre.org →
Why these techniques?

Bypass of navigation restrictions via crafted HTML directly enables drive-by compromise through malicious web content.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2025-12431Same product: Apple Macos
CVE-2025-12445Same product: Apple Macos
CVE-2025-6556Same product: Google Chrome
CVE-2022-2856Same product: Apple Macos
CVE-2017-5070Same product: Apple Macos
CVE-2016-5198Same product: Apple Macos
CVE-2024-38229Same product: Apple Macos
CVE-2024-43485Same product: Apple Macos
CVE-2024-0129Same product: Apple Macos
CVE-2023-45247Same product: Apple Macos

Affected Assets

google
chrome
≤ 146.0.7680.71

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • AC-3 Access Enforcement
  • AC-4 Information Flow Enforcement
  • SI-10 Information Input Validation
Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)
  • 7 hardening rules · 3 OS baselines
Validate
Prove the fix (OWASP ASVS)
  • V6.4.3
  • V6.6.1
  • V12.1.3

Mitigating Controls (NIST 800-53 r5) AI

AC-3 Access Enforcement good match
prevent

Directly enforces navigation restrictions that the crafted HTML page was able to bypass.

AC-4 Information Flow Enforcement good match
prevent

Enforces information flow policies for navigation actions that the vulnerability circumvented via an alternate path.

SI-10 Information Input Validation partial match
prevent

Validates untrusted HTML input to block crafted pages that exploit the navigation bypass.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.AA-03 full match
prevents

Requiring authentication on every channel and path directly eliminates alternate-path bypasses.

PR.AA-05 mostly match
prevents

Enforcing authorizations and least privilege across all access vectors prevents unauthenticated alternate paths.

PR.IR-01 mostly match
prevents

Protecting networks and environments from unauthorized logical access blocks bypass via undocumented channels.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.8.29 Security testing in development and acceptance mostly match
detects

Security testing can detect alternate-path bypasses but does not prevent them in production.

A.8.5 Secure authentication mostly match
degrades

Secure authentication control directly mitigates bypass by requiring strong, consistent authentication on all paths.

A.5.15 Access control partial match
prevents

Access control policy directly addresses alternate authentication paths by requiring all channels to enforce authentication.

A.5.17 Authentication information partial match
degrades

Authentication information management ensures credentials and mechanisms are consistently applied across all access paths.

A.5.18 Access rights partial match
prevents

Access rights provisioning and review prevent bypass via unmonitored or alternate channels.

A.8.2 Privileged access rights partial match
prevents

Privileged access rights control reduces risk of bypass through elevated or alternate paths.

References