Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apple |
|
|
|
| Linux |
|
| Microsoft |
|
Configuration 1 [-]
| AND |
|
No data.
References
History
Thu, 21 May 2026 16:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Apple
Apple macos Linux Linux linux Kernel Microsoft Microsoft windows |
|
| CPEs | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Apple
Apple macos Linux Linux linux Kernel Microsoft Microsoft windows |
Wed, 20 May 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Cross‑origin data leakage via crafted HTML page in Chrome | |
| First Time appeared |
Google
Google chrome |
|
| Vendors & Products |
Google
Google chrome |
Wed, 20 May 2026 20:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
cvssV3_1
|
Wed, 20 May 2026 19:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | |
| Weaknesses | CWE-20 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Chrome
Published: 2026-05-20T19:12:48.380Z
Updated: 2026-05-20T19:31:27.296Z
Reserved: 2026-05-20T17:39:25.650Z
Link: CVE-2026-9124
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2026-05-20T20:16:45.360
Modified: 2026-05-21T16:25:53.063
Link: CVE-2026-9124
Redhat
No data.