[CVE-2026-10968] Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.5…

Descripción técnica

Insufficient validation of untrusted input in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Puntuación CVSS

Score: 7.4/10 — Severidad: HIGH — Estado NIST: Modified

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Productos afectados

Chrome, Windows — Google, Microsoft

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.