CVE-2026-11265

Опубликовано: 05 июн. 2026

Источник: debian

Описание

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	149.0.7827.53-1		package
chromium	end-of-life		bullseye	package

Связанные уязвимости

CVE-2026-11265

CVSS3: 7.5

ubuntu

2 месяца назад

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11265

CVSS3: 7.4

redhat

2 месяца назад

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11265

CVSS3: 7.5

nvd

2 месяца назад

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11265

msrc

2 месяца назад

Chromium: CVE-2026-11265 Insufficient data validation in Autofill

GHSA-2pq7-3f5g-vmjh

CVSS3: 7.5

github

2 месяца назад

Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)