Описание
Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Ссылки
- Vendor Advisory
- Permissions Required
Уязвимые конфигурации
Одновременно
Одно из
EPSS
4.3 Medium
CVSS3
Дефекты
Связанные уязвимости
Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-13021 Inappropriate implementation in DeviceBoundSessionCredentials
Inappropriate implementation in DeviceBoundSessionCredentials in Googl ...
Inappropriate implementation in DeviceBoundSessionCredentials in Google Chrome prior to 149.0.7827.197 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Уязвимость компонента DeviceBoundSessionCredentials веб-браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS
4.3 Medium
CVSS3