Chrome <150.0.7871.125: HTML-in-CANVAS SOP Bypass
CVE-2026-15768 Published on July 14, 2026
Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Products Associated with CVE-2026-15768
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 150.0.7871.125 and below 150.0.7871.125 is affected.