Skip to content
CVSS 4.3 · MEDIUM

CVE-2026-7946

Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

View on NVD

Severity

Score: 4.3(MEDIUM)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AV: NETWORK
AC: LOW
PR: NONE
UI: REQUIRED
S: UNCHANGED
C: LOW
I: NONE
A: NONE
Weakness (CWE): NVD-CWE-noinfo

EPSS

No EPSS score yet (CVE may be too fresh).

Affects

google:chromeapple:macosgoogle:chrome_oslinux:linux_kernelmicrosoft:windows

Technical description

Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Published: 5/6/2026, 7:16:42 PM
Last modified: 5/6/2026, 11:32:20 PM

References

HomeEventsBlogResourcesTeam