CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome prior to version 150.0.7871.125 allows remote attackers to bypass the same origin policy through a crafted HTML page, potentially leading to unauthorized access to sensitive data. Organizations using affected versions of Chrome should prioritize updating to mitigate the risk of exploitation. This issue is particularly relevant for web developers and security teams managing browser security configurations.
CVE
CVE-2026-15768
Severity
MEDIUM
CVSS
6.5
EPSS
0.22%
Chrome
Original NVD Description
Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Related CVEs
Other vulnerabilities affecting the same vendor(s)