PT-2026-102861 · Google · Google Chrome
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 154.0.8037.92
Description
Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin—and gain access to a privileged page through a crafted HTML page.
Recommendations
Update Google Chrome to version 154.0.8037.92 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chrome