CVE Catalog
CVE-2026-9115
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
Insufficient policy enforcement in Service Worker in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
The organization is at risk of same origin policy bypass attacks, potentially leading to data theft or unauthorized access to resources.
Recommendation
It is recommended to immediately update Google Chrome to version 148.0.7778.179 or later.
Original NVD description (English source)
Insufficient policy enforcement in Service Worker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)