Volerion logoVolerion
Volerion logoVolerion

Google Chrome Same-Origin Policy Bypass Vulnerability in Canvas

Vulnerability

A vulnerability in Google Chrome's Canvas implementation, present in versions prior to 148.0.7778.96, allowed remote attackers to bypass the same-origin policy by using a specially crafted HTML page. This issue could potentially lead to unauthorized access or manipulation of web content from different origins.

Impact

Exploitation of this vulnerability could allow a remote attacker to bypass the same-origin policy, potentially leading to unauthorized access or manipulation of web content across different origins.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 8:02 PM
Updated: May 6, 2026, 8:02 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.