CVE-2026-11180

Опубликовано: 04 июн. 2026

Источник: debian

EPSS Низкий

Описание

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	149.0.7827.53-1		package
chromium	end-of-life		bullseye	package

EPSS

Процентиль: 14%

0.00229

Низкий

Связанные уязвимости

CVE-2026-11180

CVSS3: 6.5

ubuntu

2 месяца назад

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11180

CVSS3: 7.4

redhat

2 месяца назад

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11180

CVSS3: 6.5

nvd

2 месяца назад

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11180

msrc

2 месяца назад

Chromium: CVE-2026-11180 Policy bypass in SVG

GHSA-mjw8-q776-q5xr

CVSS3: 6.5

github

2 месяца назад

Inappropriate implementation in SVG in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 14%

0.00229

Низкий