Web Origin Policy Bypass in Google Chrome

CVE-2026-121204

What is CVE-2026-121204?

A vulnerability exists in Google Chrome where inadequate cleanup within DevTools allows a remote attacker to exploit the web origin policy. This can be achieved using a specially crafted HTML page, which leads to the potential bypass of important security mechanisms designed to isolate web content. Users of affected Chrome versions should remain vigilant and apply updates to mitigate this risk.

References