Google Chrome Same-Origin Policy Bypass Vulnerability in Service Worker

A vulnerability in Google Chrome's Service Worker component, affecting versions prior to 148.0.7778.179, allowed remote attackers to bypass the same-origin policy using a crafted HTML page. This flaw resulted from inadequate policy enforcement, creating a potential security risk by enabling cross-origin interactions that should have been restricted.

Impact

Exploitation of this vulnerability could lead to unauthorized cross-origin resource access, potentially allowing attackers to manipulate or steal data from other origins.

Remediation

Users can update to Google Chrome version 148.0.7778.179 or later to address this vulnerability.