The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...

Chromium: CVE-2026-17824 Insufficient policy enforcement in ServiceWorker

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-17824

An insufficient policy enforcement flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517655543...

SUSE CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-50773

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a security flaw due to insufficient policy enforcement in the ServiceWorker component. A remote attacker can exploit this by using a crafted HTML page to bypass the same origin policy . The vulnerability has a Medium security severit...

CVE-2026-17824

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-17824: Improper Access Control

Insufficient policy enforcement in ServiceWorker in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66143

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in the ServiceWorker allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script...

Astra Linux – Vulnerability in Chromium

Using use after free in ServiceWorker in Google Chrome before version 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in ServiceWorker in Google Chrome before version 148.0.7778.179 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

ROS-20260722-73-0026

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

ROS-20260721-73-0020

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

ROS-20260721-73-0015

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260720-73-0059

The vulnerability of Google Chrome’s ServiceWorker component relates to the ability to utilize memory after it is released. Exploiting this vulnerability could allow a remote attacker to redirect users to malicious web pages and execute arbitrary code...