CyberRota Analysis
AI-GeneratedA vulnerability in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows remote attackers to exploit incorrect authorization and bypass web origin policies through a specially crafted Chrome extension, potentially leading to unauthorized access to sensitive data. Organizations using affected versions of Chrome should prioritize updating to mitigate the risk of exploitation, particularly those with users who may encounter malicious extensions.
Original NVD Description
Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)