Описание
Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
An insufficient policy enforcement flaw was found in the Service Worker component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=495999481
Отчет
Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Дополнительная информация
Статус:
9.3 Critical
CVSS3
Связанные уязвимости
Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Chromium: CVE-2026-9115 Insufficient policy enforcement in Service Worker
Insufficient policy enforcement in Service Worker in Google Chrome on ...
Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
9.3 Critical
CVSS3