Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-8539

Опубликовано: 14 мая 2026
Источник: debian
EPSS Низкий

Описание

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed148.0.7778.167-1package
chromiumend-of-lifebullseyepackage

EPSS

Процентиль: 6%
0.00159
Низкий

Связанные уязвимости

CVSS3: 5.4
ubuntu
3 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVSS3: 8.1
redhat
3 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVSS3: 5.4
nvd
3 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

msrc
3 месяца назад

Chromium: CVE-2026-8539 Script injection in SanitizerAPI

CVSS3: 5.4
github
3 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

EPSS

Процентиль: 6%
0.00159
Низкий