Insufficient Policy Enforcement in Google Chrome Affects Data Security

CVE-2026-6312

What is CVE-2026-6312?

A vulnerability in Google Chrome that relates to insufficient policy enforcement in its Passwords feature enables attackers who have managed to compromise the renderer process to exploit this weakness. By crafting a malicious HTML page, these attackers can leak sensitive cross-origin data, posing a significant security risk. Users are encouraged to update their Chrome to the latest version to mitigate exposure to such attacks.

References