CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 152.0.7977.65 are vulnerable due to an incorrect authorization in Extensions, which allows remote attackers to exploit the renderer process and bypass web origin policy to access privileged pages through a specially crafted HTML page. This vulnerability poses a significant risk as it can lead to unauthorized access and potential data exposure. Organizations using affected versions of Chrome should prioritize updates to mitigate this security risk.
Original NVD Description
Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a privileged page via a crafted HTML page. (Chromium security severity: High)
Related CVEs
Other vulnerabilities affecting the same vendor(s)