CVE-2026-14023

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-14023

A vulnerability exists in the SanitizerAPI component of the Chromium browser (including Google Chrome and Microsoft Edge ) due to insufficient validation of untrusted input. A remote attacker can exploit this flaw by using a crafted HTML page to bypass the same-origin policy and manipulate data i...

CVE-2026-8539

A script injection vulnerability exists in the SanitizerAPI component of Google Chrome on Android (prior to version 148.0.7778.168 ). A remote attacker can exploit this by hosting a crafted HTML page to inject arbitrary scripts or HTML, leading to a User Experience Script Injection (UXSS) . The s...

Linux Distros Unpatched Vulnerability : CVE-2026-7939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a...

EUVD-2026-27981

Inappropriate implementation in SanitizerAPI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...