Autodidact

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 154.0.8037.92 **Description** Missing authorization in the Payments component allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The web origin policy is a security mechanism that prevents scripts on one page from accessing data on another page unless they share the same origin. **Recommendations** Update Google Chrome to version 154.0.8037.92 or later.