Google Chrome Media Same-Origin Policy Bypass Vulnerability

Vulnerability

A vulnerability in the Media component of Google Chrome prior to version 148.0.7778.216 allowed remote attackers to bypass the same-origin policy by using a crafted video file. This issue was classified as having high severity.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of data across different origins, potentially allowing for cross-site scripting or other attacks that rely on same-origin policy violations.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.

Added: May 28, 2026, 11:25 PM
Updated: May 28, 2026, 11:25 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
1.3
exploitability
4.4
remediation
7.7
relevance
9.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.