CVE-2026-9124

Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-9124

The Input component in Google Chrome (and potentially Microsoft Edge ) is vulnerable to insufficient validation of untrusted input in versions prior to 148.0.7778.179 . A remote attacker who has already compromised the renderer process can exploit this flaw to leak cross-origin data via a special...