Insufficient Policy Enforcement Issue in Google Chrome

CVE-2026-12460

What is CVE-2026-12460?

A vulnerability in Google Chrome's File System Access feature has been identified, which allows a remote attacker to exploit insufficient policy enforcement. This occurs when an attacker, who has compromised the renderer process, can bypass site isolation mechanisms using a specially crafted PDF file. This could potentially lead to unauthorized access to sensitive data or manipulation of the web application environment.

References