Executive brief
StorageAccessAPI is a browser feature that manages cross-site cookie access permissions. A flaw in Chrome versions before 152.0.7977.65 allowed an attacker who compromised the renderer process to bypass web origin security policies, potentially accessing storage that should be restricted. An exploit requires the attacker to first compromise the Chrome renderer, but once achieved, it could lead to unauthorized data access across website origins.
Technical details
This is an incorrect authorization vulnerability in Chrome's StorageAccessAPI component. An attacker who has already compromised the Chrome renderer process can craft a malicious HTML page that exploits the authorization flaw to bypass web origin policy restrictions. The vulnerability allows unauthorized access to storage across origins that would normally be blocked by the Same-Origin Policy. The fix is available in Chrome 152.0.7977.65 and later. Attack requires prior renderer process compromise, meaning a prior RCE or process escape is necessary.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Fixed in Chrome 152.0.7977.65