Executive brief
Google Chrome's StorageAccessAPI, a web security feature that controls how websites access storage across different origins, contains an authorization bypass vulnerability. An attacker who gains control of Chrome's renderer process (the component that executes web pages) can bypass the origin policy restrictions, potentially gaining unauthorized access to stored data from other websites. This could lead to data theft or session hijacking depending on what data is stored.
Technical details
This is an incorrect authorization vulnerability in Chrome's StorageAccessAPI that allows an attacker who has compromised the renderer process to bypass the Same-Origin Policy (SOP) and related origin restrictions. The vulnerability requires prior compromise of the renderer process, which could be achieved through a separate renderer vulnerability or sandbox escape. An attacker exploiting this flaw can craft a malicious HTML page to gain unauthorized access to storage resources across different web origins. The vulnerability has been fixed in Chrome version 152.0.7977.65 and later. Chromium security severity is rated as Low.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Fixed in Chrome 152.0.7977.65