CVE-2026-76019
Description
A flaw was found in chromium-browser. Incorrect authorization in the Workers component allows a remote attacker, who has compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into interacting with a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actions across different web origins.
Statement
This vulnerability is rated as an Important severity flaw because an attacker who bypasses origin restrictions can compromise sensitive cross-origin session data, even though exploitation requires a multi-stage attack involving prior renderer compromise and user interaction. Chromium is not distributed in core Red Hat Enterprise Linux repositories and is only available through community channels such as EPEL and Fedora, which significantly limits exposure across standard enterprise deployments. Typical server environments running without graphical desktop environments or browser installations are unaffected.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
