Skip to content
CVSS 4.3 · MEDIUM

CVE-2026-7946

Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Ver en NVD

Severidad

Puntaje: 4.3(MEDIUM)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
AV: NETWORK
AC: LOW
PR: NONE
UI: REQUIRED
S: UNCHANGED
C: LOW
I: NONE
A: NONE
Tipo de falla (CWE): NVD-CWE-noinfo

EPSS

Sin puntaje EPSS aún (CVE muy reciente).

Afecta

google:chromeapple:macosgoogle:chrome_oslinux:linux_kernelmicrosoft:windows

Descripción técnica

Insufficient policy enforcement in WebUI in Google Chrome on Linux, Mac, Windows, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Publicada: 6/5/2026, 19:16:42
Última modificación: 6/5/2026, 23:32:20

Referencias

InicioEventosBlogRecursosEquipo