CVE-2026-11197

Insufficient policy enforcement in Workers in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-10996

The CVE-2026-10996 entry concerns Google Chrome’s Web Workers where an improper implementation allows a remote attacker to bypass the Same Origin Policy via a crafted HTML page. Affected product: Google Chrome (Workers). Root cause: incorrect Worker implementation enabling cross-origin bypass. Im...

Google releases Cloud-based Web App Vulnerability Scanner and Assessment Tool

Google on Thursday unleashed its own free web application vulnerability scanner tool, which the search engine giant calls Google Cloud Security Scanner, that will potentially scan developers' applications for common security vulnerabilities on its cloud platform more effectively. SCANNER ADDRESSE...