Executive brief
Google Chrome is a widely used web browser for accessing the internet and running web applications. A security flaw in how the browser handles certain web graphics (HTML-in-Canvas) could allow a malicious website to bypass the 'Same Origin Policy,' which is a fundamental security rule that prevents websites from seeing each other's data. If exploited, an attacker could potentially steal sensitive information, such as login sessions or personal data, from other websites you have open.
Technical details
A vulnerability exists in Google Chrome's HTML-in-Canvas component due to insufficient policy enforcement. By convincing a user to visit a specially crafted HTML page, a remote attacker can bypass the Same Origin Policy (SOP). This bypass allows the malicious site to read or interact with data from other origins that should be isolated. The issue was reported by Google and is fixed in version 150.0.7871.125. While specific root cause details are restricted, the flaw typically involves improper validation when rendering HTML elements within a canvas element, leading to cross-origin data leakage.
Affected products
- Google Chrome prior to 150.0.7871.125
Timeline
- 2026-05-29: other: Reported by Google internal researchers
- 2026-07-14: patched: Fixed in Stable Channel Update 150.0.7871.125
- 2026-07-14: disclosed