Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.3
Google Chrome before version 91 may mishandle cookie policies
published 1 month ago
Summary
The Chromium‑based browser versions earlier than 91 do not correctly enforce the rules that control how cookies are stored and shared. This could allow malicious websites to set or read cookies they should not, potentially exposing user data or session information. Update Chrome to version 91 or later, or apply any provided security patches, to restore proper cookie handling.
What to do
- Update cleanstart chromium to version 91.0.4472.77-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | chromium |
< 91.0.4472.77-r0 Fix: upgrade to 91.0.4472.77-r0
|
Original advisory text
Insufficient policy enforcement in cookies in Google Chrome prior to 91
Security vulnerability affects the chromium package. Insufficient policy enforcement in cookies in Google Chrome prior to 91.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2024-JA96545 · OSV
Track software like this
Free during beta