EUVD-2026-40720
Client-Side Enforcement of Server-Side Security (CWE-602)
GHSA-mf8w-855x-826p
6.5
CVSS 3.1 · Vendor: google
Share
Severity by source
Vendor (google)
PRIMARY
6.5
MEDIUM
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
vuln.today
AI
8.2
HIGH
Site isolation bypass implies a scope change (S:C) and cross-origin confidentiality exposure (C:H); I:L reflects constrained integrity manipulation potential against other origins.
3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N
SUSE
MEDIUM
qualitative
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Lifecycle Timeline
4
Analysis Generated
Jul 01, 2026 - 14:32 vuln.today
CVSS changed
Jul 01, 2026 - 14:22 NVD
6.5 (None)
6.5 (MEDIUM)
CVE Published
Jun 30, 2026 - 23:17 cve.org
UNKNOWN (no severity yet)
CVE Published
Jun 30, 2026 - 23:17 cve.org
MEDIUM 6.5
DescriptionCVE.org
Insufficient policy enforcement in Media in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
Site isolation bypass in Google Chrome's Media component on Windows allows remote attackers to circumvent cross-origin security boundaries by delivering a specially crafted HTML page to a victim. All Chrome for Windows releases prior to 150.0.7871.47 are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Access
Attacker crafts HTML page with malicious Media payload
Delivery
Victim lured via phishing or compromised site
Exploit
Chrome on Windows loads crafted page
Execution
Media component triggers policy enforcement flaw
Persist
Site isolation boundary bypassed across origins
Impact
Cross-origin integrity impact achieved in victim browser session
Access
Attacker crafts HTML page with malicious Media payload
Delivery
Victim lured via phishing or compromised site
Exploit
Chrome on Windows loads crafted page
Execution
Media component triggers policy enforcement flaw
Persist
Site isolation boundary bypassed across origins
Impact
Cross-origin integrity impact achieved in victim browser session
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following: (1) the victim is running Google Chrome on Windows specifically - the vulnerability is not present on macOS, Linux, or mobile platforms; (2) the victim must actively visit an attacker-controlled HTML page containing crafted Media content (UI:R per the CVSS vector - user interaction is mandatory); (3) the victim must be running Chrome for Windows prior to version 150.0.7871.47. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N, score 6.5) presents a potential internal inconsistency: S:U (unchanged scope) is in tension with a site isolation bypass, which by definition crosses origin security boundaries and would canonically warrant S:C. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a crafted HTML page embedding specially constructed Media content and lures a Windows Chrome user to visit it via phishing, malvertising, or a compromised third-party site. When the victim's browser processes the page, the Media component's defective policy enforcement allows the attacker's renderer process to violate site isolation, potentially interacting with or reading data from other origins loaded in the same browser session. … |
| Remediation | The primary remediation is upgrading Google Chrome on Windows to version 150.0.7871.47 or later, which contains the vendor-released patch per Google's stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).