Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chrome <149 allows remote page to ignore same-origin restrictions
published 5 months ago
Summary
Versions of Google Chrome released before 149 let a malicious website trick the browser into treating content from different sites as if they were from the same site. This could let attackers read or modify data they shouldn't access. Update Chrome to the latest version or apply any released patches as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | chromium | All versions |
Original advisory text
ECHO-0473-3130-942e
Timeline
Published6 Jun 2026
Updated6 Jun 2026
First seen6 Jun 2026
Sources
ECHO-0473-3130-942e · OSV
Track software like this
Free during beta