5 matches found
CVE-2026-76019
Incorrect authorization in Chrome's Workers component allows a remote attacker with a compromised renderer process to bypass the web origin policy via a crafted HTML page, requiring social engineering. Fixed in Chrome 151.0.7922.173 (desktop). No exploitation details are provided in the documents.
EUVD-2026-63596
Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...
CVE-2026-76041
A flaw was found in chromium-browser. An information leak in the Skia component allows a remote attacker to potentially bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information across different web origins. Mitigation Avoid...
