Google Chrome Content Security Policy Bypass Vulnerability in Loader

A vulnerability allowing remote attackers to bypass content security policy has been identified in Google Chrome. This issue arises from insufficient policy enforcement in the Loader component, affecting Chrome versions prior to 138.0.7204.49. The vulnerability can be exploited by crafting a specific HTML page.

Impact

Exploitation of this vulnerability allows for content security policy bypass, which could lead to the execution of malicious scripts or the loading of harmful resources that would typically be blocked by the policy.

Remediation

Users can update to Google Chrome version 138.0.7204.49 or later to address this vulnerability.