Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-15124

An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523735038...

Linux Distros Unpatched Vulnerability : CVE-2026-15124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

chromedriver-150.0.7871.114-1.1 on GA media (moderate)

chromedriver-150.0.7871.114-1.1 on GA media Announcement ID: openSUSE-SU-2026:11254-1 Rating: moderate Cross-References: CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110 CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114 CVE-2026-15115 CVE-2026-15116 CVE-2026-15117...

CVE-2026-15124

creationtimestamp| type| source ---|---|--- 2026-07-09 04:45:46+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260709...

CVE-2026-15124

Google Chrome and Microsoft Edge are affected by a vulnerability in the Password component due to insufficient policy enforcement and insufficient validation of entered data . A remote attacker can exploit this by leveraging a crafted HTML page to bypass the same-origin policy , potentially gaini...