Security Risk Category

policy-bypass Security Risks

Published vulnerability pages connected to policy-bypass. One risk can appear in multiple categories while keeping one canonical page.

policy-bypass risks

Showing 4 of 4 published risks.

lowEPSS 0.001

Google Chrome Android WebAppInstalls Same-Origin Policy Bypass Vulnerability

Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.115 allowed a local attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15115chromechromiumbrowserandroid

Updated Jul 10, 2026

mediumEPSS 0.002

Google Chrome Passwords Same-Origin Policy Bypass Vulnerability

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15124chromechromiumbrowserpasswords

Updated Jul 10, 2026

mediumEPSS 0.002

Google Chrome Navigation Policy Enforcement Site Isolation Bypass Vulnerability

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

CVE-2026-15130chromechromiumbrowsernavigation

Updated Jul 10, 2026

mediumEPSS 0.002

Google Chrome Navigation Site Isolation Bypass Vulnerability

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-15131chromechromiumbrowsernavigation

Updated Jul 10, 2026