Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-8539

Опубликовано: 14 мая 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.4

Описание

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-apps/resolute

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
questing

not-affected

code not present
resolute

not-affected

code not present
upstream

released

Показывать по

EPSS

Процентиль: 5%
0.00159
Низкий

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 8.1
redhat
4 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

CVSS3: 5.4
nvd
4 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

msrc
4 месяца назад

Chromium: CVE-2026-8539 Script injection in SanitizerAPI

CVSS3: 5.4
debian
4 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to ...

CVSS3: 5.4
github
4 месяца назад

Script injection in SanitizerAPI in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

EPSS

Процентиль: 5%
0.00159
Низкий

5.4 Medium

CVSS3