Executive brief
Google Chrome's navigation system prior to version 152.0.7977.75 contains an authorization flaw that allows attackers who have compromised the browser renderer process to bypass web origin policy protections. This could enable a compromised renderer to access or manipulate content across different website origins, potentially leading to data theft or unauthorized actions on behalf of users.
Technical details
This vulnerability is an incorrect authorization flaw in Chrome's Navigation component that fails to properly enforce web origin policy boundaries. The vulnerability requires an attacker to first compromise the renderer process (a sandboxed subprocess that executes web content). From that compromised state, an attacker can craft a malicious HTML page to bypass origin policy controls, allowing cross-origin access that should be blocked by the Same-Origin Policy. The vulnerability affects Chrome versions prior to 152.0.7977.75. A patch is available in Chrome 152.0.7977.75 and later versions.
Affected products
- Google Chrome prior to 152.0.7977.75
Timeline
- 2026-09-02: disclosed