Google Chrome CORS Same-Origin Policy Bypass Vulnerability

A vulnerability in Google Chrome's handling of Cross-Origin Resource Sharing (CORS) prior to version 148.0.7778.96 allowed remote attackers to bypass the same-origin policy. This was achieved through insufficient validation of untrusted input, enabling the execution of malicious actions via a crafted HTML page. The vulnerability affected the renderer process, where the exploitation occurred.

Impact

Exploitation of this vulnerability allowed for a same-origin policy bypass, which could lead to unauthorized access or manipulation of resources between different origins.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.