Security Advisory

CVE-2026-3934

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-03-11 22:04:13
Last updated 2026-03-14 03:04:48
Assigner Chrome
State PUBLISHED

Description

Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)