Inappropriate implementation in Sharing in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 6.5 · googleNVD modified 2026-10-25 21:10
Affected (CPE criteria) 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
References 2
- https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html Release Notes
- https://issues.chromium.org/issues/513001690 Permissions Required