CVE-2026-15131

Опубликовано: 08 июл. 2026

Источник: redhat

CVSS3: 9.3

EPSS Низкий

Описание

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

An insufficient data validation flaw was found in the Navigation component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=526542464

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-653

https://bugzilla.redhat.com/show_bug.cgi?id=2498374chromium-browser: chromium-browser: Insufficient data validation in Navigation

EPSS

Процентиль: 7%

0.00172

Низкий

9.3 Critical

CVSS3

Связанные уязвимости

CVE-2026-15131

CVSS3: 4.3

nvd

около 1 месяца назад

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-15131

msrc

14 дней назад

Chromium: CVE-2026-15131 Insufficient data validation in Navigation

CVE-2026-15131

CVSS3: 4.3

debian

около 1 месяца назад

Inappropriate implementation in Navigation in Google Chrome prior to 1 ...

GHSA-mmx7-9gvj-j7gm

CVSS3: 4.3

github

около 1 месяца назад

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 7%

0.00172

Низкий

9.3 Critical

CVSS3