Medium chrome Authorization Error 🔧 Commit mapped

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactMissing authorization in FullScreen
DescriptionMissing authorization in FullScreen
ComponentFullScreen
Sub-componentFullscreen
Bug ClassAuthorization Error
Tracker501896592
Fix commit9cac98c2abfa (chromium/src) +1/-0
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-06

Files Changed

  • chrome/browser/ui/exclusive_access/fullscreen_controller.cc
From 9cac98c2abfae92088763e78e794e30984e8e4b6 Mon Sep 17 00:00:00 2001
From: Mike Wasserman <msw@chromium.org>
Date: Thu, 03 Sep 2026 17:38:56 -0700
Subject: [PATCH] Fullscreen: Ignore display ids without Window Management permission

Adds an extra layer of protection for compromised renderers

Fixed: 501896592
Change-Id: Ic9986c3c1883f28308f6dbac9bc99141821eac25
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8355032
Reviewed-by: Vikram Pasupathy <vpasupathy@chromium.org>
Commit-Queue: Vikram Pasupathy <vpasupathy@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1692074}
---
diff --git a/chrome/browser/ui/exclusive_access/fullscreen_controller.cc b/chrome/browser/ui/exclusive_access/fullscreen_controller.cc
index 5b198cf..1e0d665 100644
--- a/chrome/browser/ui/exclusive_access/fullscreen_controller.cc
+++ b/chrome/browser/ui/exclusive_access/fullscreen_controller.cc
@@ -604,6 +604,7 @@
                       requesting_frame) !=
               blink::mojom::PermissionStatus::GRANTED) {
         display_id = display::kInvalidDisplayId;
+        fullscreen_tab_params.display_id = display::kInvalidDisplayId;
       } else if (entering_tab_fullscreen) {
         display_id_prior_to_tab_fullscreen_ = current_display;
       }
Loading diff…

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.