Chromium: CVE-2026-15124 Insufficient policy enforcement in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-15124

An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523735038...

Linux Distros Unpatched Vulnerability : CVE-2026-15124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML...

CVE-2026-15124 vulnerabilities

Vulnerabilities for packages: chromium...

chromedriver-150.0.7871.114-1.1 on GA media (moderate)

chromedriver-150.0.7871.114-1.1 on GA media Announcement ID: openSUSE-SU-2026:11254-1 Rating: moderate Cross-References: CVE-2026-15107 CVE-2026-15108 CVE-2026-15109 CVE-2026-15110 CVE-2026-15111 CVE-2026-15112 CVE-2026-15113 CVE-2026-15114 CVE-2026-15115 CVE-2026-15116 CVE-2026-15117...

CVE-2026-15124

Google Chrome and Microsoft Edge web browsers are vulnerable to CVE-2026-15124 due to insufficient policy enforcement in the Password component . This flaw stems from insufficient validation of entered data , which allows a remote attacker to bypass the same-origin policy using a crafted HTML pag...