CyberRota Analysis
AI-GeneratedA vulnerability in the Lighthouse component of Google Chrome prior to version 152.0.7977.65 allows remote attackers to exploit missing authorization, enabling them to bypass site isolation through a crafted HTML page after compromising the renderer process via social engineering. This could lead to unauthorized access to sensitive data and should be prioritized by organizations using affected versions of Chrome, particularly those handling confidential information. Users should update their browsers promptly to mitigate potential risks.
Original NVD Description
Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)