CVE-2026-7939

An inappropriate implementation flaw was found in the SanitizerAPI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=492963096...

Chromium: CVE-2026-7939 Inappropriate implementation in SanitizerAPI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-7939

CVE-2026-7939 affects Google Chrome’s SanitizerAPI: an inappropriate implementation allows UXSS via a crafted HTML page, prior to Chrome 148.0.7778.96. Remote script/HTML injection is possible. Remediation is to upgrade to Chrome 148.0.7778.96 or later (as per Chrome stable release notes and Debi...

CVE-2026-7939

Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...