Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
Chromium before version 102 may bypass security policy
published 1 month ago
Summary
The Chromium package used in Google Chrome versions earlier than 102 does not fully enforce the Cross‑Origin Opener Policy. This can let a malicious website interact with other sites opened in the same browser, potentially exposing user data. Upgrade Chromium to version 102 or later to ensure proper policy enforcement.
What to do
- Update cleanstart chromium to version 102.0.5005.61-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | chromium |
< 102.0.5005.61-r0 Fix: upgrade to 102.0.5005.61-r0
|
Original advisory text
Insufficient policy enforcement in COOP in Google Chrome prior to 102
Security vulnerability affects the chromium package. Insufficient policy enforcement in COOP in Google Chrome prior to 102.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Oct 2026
Updated1 Oct 2026
First seen1 Oct 2026
Sources
CLEANSTART-2024-AQ78827 · OSV
Track software like this
Free during beta