Google Chrome COOP Site Isolation Bypass Vulnerability

A vulnerability in Google Chrome prior to version 148.0.7778.96 allows a remote attacker to bypass site isolation protections. This issue arises from insufficient validation of untrusted input in the Cross-Origin-Opener-Policy (COOP) header. An attacker who has compromised the renderer process can exploit this vulnerability by delivering a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a bypass of site isolation, potentially allowing for cross-origin attacks or data leakage between sites.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.