We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Reserved 2025-05-13 | Published 2025-05-14 | Updated 2025-05-17 | Assigner ChromeDate added 2025-05-15 | Due date 2025-06-05
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Insufficient policy enforcement
chromereleases.googleblog.com/...-update-for-desktop_14.html
issues.chromium.org/issues/415810136
Support options
