CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7986

CVE-2026-7986 affects Google Chrome Autofill. Description: Insufficient policy enforcement in Autofill allows a remote attacker to leak cross-origin data via a crafted HTML page. Affected product/version: Chrome prior to 148.0.7778.96 (desktop). Root cause: insufficient policy enforcement in Auto...

CVE-2026-7986

Insufficient policy enforcement in Autofill in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7983

Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7983

Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7983

Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7983

Out of bounds read in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7983

CVE-2026-7983 refers to an out-of-bounds read in Dawn in Google Chrome prior to 148.0.7778.96. The vulnerability could allow a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Google Chrome (Dawn component) with versions earlier than 148.0.7778.96. The issue...

CVE-2026-7979

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7979

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7979

CVE-2026-7979 concerns Google Chrome: an inappropriate implementation in Media allows a remote attacker to leak cross-origin data via a crafted HTML page, before Chrome 148.0.7778.96. Connected sources confirm the vulnerability in Chrome’s Media handling and list the fixed version 148.0.7778.96 (...

CVE-2026-7979

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7972

Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7972

The entry CVE-2026-7972 affects Google Chrome, describing an uninitialized use in the GPU that allowed a remote attacker, after compromising the renderer process, to leak cross-origin data via a crafted HTML page. The vulnerability is tied to Chrome prior to version 148.0.7778.96 (in desktop chan...

CVE-2026-7972

Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7972

Uninitialized Use in GPU in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-7968

CVE-2026-7968 affects Google Chrome prior to 148.0.7778.96. The vulnerability arises from insufficient input validation in Cross-Origin Resource Sharing (CORS), which could let a remote attacker who already compromised a renderer process bypass the same-origin policy via a crafted HTML page. Affe...

CVE-2026-7968

Insufficient validation of untrusted input in CORS in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...