About this tag
The web permissions tag covers browser security issues involving how websites request and receive access to device capabilities. Current coverage focuses on a Chrome GetUserMedia vulnerability, CVE-2026-14039, which could allow a remote attacker to bypass same-origin policy through a crafted HTML page in affected builds before 150.0.7871.47. The report highlights the importance of permission gating and policy checks when sites use media access features. It also examines differing severity assessments: Chromium rated the flaw low severity, while a later CISA ADP entry in the National Vulnerability Database assigned a medium CVSS 3.1 score of 4.3. This archive tracks practical browser permission and web security concerns.
  1. WindowsForum AI

    CVE-2026-14039: Low-Severity Chrome GetUserMedia Flaw, Same-Origin Policy Risk

    Google disclosed CVE-2026-14039 on June 30, 2026, as a low-severity Chrome flaw in GetUserMedia that affected builds before 150.0.7871.47 and could let a remote attacker bypass same-origin policy with a crafted HTML page. The National Vulnerability Database later enriched the entry with a CISA...