CVE-2026-91719

Опубликовано: 15 сент. 2026

Источник: redhat

CVSS3: 4.3

EPSS Низкий

Описание

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

A code injection flaw was found in the XML component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=542115030

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-91

https://bugzilla.redhat.com/show_bug.cgi?id=2534925chromium-browser: chromium-browser: Code injection in XML

EPSS

Процентиль: 17%

0.00255

Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2026-91719

ubuntu

2 дня назад

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-91719

nvd

3 дня назад

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-91719

debian

3 дня назад

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed ...

GHSA-j729-gm4h-rp32

github

3 дня назад

Code injection in XML in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 17%

0.00255

Низкий

4.3 Medium

CVSS3