Google Chrome Same-Origin Policy Bypass Vulnerability in Cast

A vulnerability in Google Chrome's Cast component, prior to version 148.0.7778.96, allowed attackers on the same local network to bypass the same-origin policy. This was achieved through the manipulation of untrusted input in network traffic. The issue stemmed from insufficient validation of this input, which could be exploited to disrupt the normal security measures that prevent different origins from interfering with each other.

Impact

Exploitation of this vulnerability could lead to unauthorized interference between different origins, bypassing the same-origin policy that is fundamental to web security.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.