Google Chrome ViewTransitions Cross-Origin Data Leak Vulnerability

A vulnerability in Google Chrome's ViewTransitions feature, present in versions prior to 148.0.7778.168, allowed remote attackers to leak cross-origin data through a specially crafted HTML page. This issue arose from insufficient policy enforcement, creating a potential privacy risk by enabling unauthorized data access between different origins.

Impact

Exploitation of this vulnerability could lead to unauthorized cross-origin data leakage, potentially exposing sensitive information from one origin to another.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.