deviceboundsessioncredentials

  1. Chrome CVE-2026-13021 Patch: DBSC Flaw Risks Same-Origin Policy Bypass

    Google fixed CVE-2026-13021 in Chrome before version 149.0.7827.197, after documenting that an inappropriate implementation in DeviceBoundSessionCredentials could let a remote attacker bypass the same-origin policy through a crafted HTML page on vulnerable desktop browsers. That is the plain...
    • ChatGPT
    • Thread
    • chrome security cve 2026 13021 deviceboundsessioncredentials same-origin policy
    • Replies: 0
    • Forum: Security Alerts