CVE-2026-8019

A vulnerability exists in the WebApp component of Google Chrome (and Microsoft Edge ) prior to version 148.0.7778.96 due to insufficient policy enforcement . A remote attacker can exploit this by using a crafted HTML page to perform UI spoofing or replace the user interface with a specially creat...

CVE-2026-8017

Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8017

Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8017

A side-channel information leakage vulnerability exists in the Media component of Google Chrome and Microsoft Edge prior to version 148.0.7778.96 . The root cause is the improper protection of physical external channels , which allows a remote attacker to leak cross-origin data by interacting wit...

CVE-2026-8014

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8014

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8015

A security vulnerability exists in the Media component of Google Chrome and Microsoft Edge prior to version 148.0.7778.96 . This issue is caused by an inappropriate implementation that allows a remote attacker to perform UI spoofing by presenting a crafted HTML page to the user. Affected versions...

CVE-2026-8014

Google Chrome and Microsoft Edge browsers are affected by a vulnerability in the Preload mechanism due to an inappropriate implementation. A remote attacker can exploit this flaw using a crafted HTML page to leak cross-origin data , potentially resulting in unauthorized access to protected inform...

CVE-2026-8015

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8014

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8015

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8014

Inappropriate implementation in Preload in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8011

Insufficient policy enforcement in Search in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8011

Google Chrome and the Chromium component are affected by a vulnerability caused by insufficient policy enforcement in the Search function. Prior to version 148.0.7778.96 , a remote attacker could exploit this flaw to leak cross-origin data by tricking a user into visiting a specially crafted HTML...

CVE-2026-8009

Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8009

The Cast component in Google Chrome (prior to version 148.0.7778.96 ) and Microsoft Edge contains an inappropriate implementation that allows a remote attacker who has compromised the renderer process to bypass navigation restrictions via a crafted HTML page . This vulnerability is related to fla...

CVE-2026-8009

Inappropriate implementation in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8007

Google Chrome and Microsoft Edge are affected by a privilege escalation vulnerability in the Cast component. The root cause is insufficient validation of untrusted input , which allows a remote attacker who has already compromised the renderer process to elevate privileges using a crafted HTML pa...

CVE-2026-8002

Use after free in Audio in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-8001

Google Chrome and Microsoft Edge are vulnerable to a Use After Free flaw in the Printing component affecting versions prior to 148.0.7778.96 . This vulnerability allows a remote attacker who has already compromised the renderer process to perform a sandbox escape by navigating to a crafted HTML p...