Google Chrome Resource Timing Side-Channel Information Leakage Vulnerability

Vulnerability

A side-channel information leakage vulnerability has been identified in Google Chrome, specifically in the ResourceTiming feature. This issue affects Chrome versions prior to 146.0.7680.71. The vulnerability allows remote attackers to leak cross-origin data by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cross-origin data, potentially allowing attackers to gather sensitive information from other domains.

Remediation

Users can update to Google Chrome version 146.0.7680.71 or later to address this vulnerability.

Added: Mar 11, 2026, 10:27 PM
Updated: Mar 11, 2026, 10:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
4.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.