Executive brief
Google Chrome is a widely used web browser. A security vulnerability in the browser's network caching component could allow a malicious website to access data from other websites you have visited. This could lead to the unauthorized disclosure of sensitive information across different web services.
Technical details
An insufficient data validation vulnerability exists in the NetworkCache component of Google Chrome. By enticing a user to visit a specially crafted HTML page, a remote attacker can exploit this flaw to leak cross-origin data. The vulnerability stems from how the browser validates cached network data, potentially bypassing Same-Origin Policy (SOP) protections. This issue affects Google Chrome versions prior to 150.0.7871.47. Users are advised to update to the latest stable channel release to mitigate this risk.
Affected products
- Google Chrome prior to 150.0.7871.47
Timeline
- 2026-06-30: advisory
- 2026-06-30: patched