Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 26 Aug 2026 03:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Google
Google chrome |
|
| Vendors & Products |
Google
Google chrome |
Wed, 26 Aug 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Insecure Origin Policy Bypass via Autofill Race Condition in Chrome |
Tue, 25 Aug 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Race condition in Autofill in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: High) | |
| Weaknesses | CWE-362 | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-08-25T20:10:07.717Z
Reserved: 2026-08-25T06:07:30.744Z
Link: CVE-2026-79014
No data.
Status : Received
Published: 2026-08-25T21:17:57.190
Modified: 2026-08-25T21:17:57.190
Link: CVE-2026-79014
No data.
OpenCVE Enrichment
Updated: 2026-08-26T03:15:03Z
Weaknesses