Chrome CORS Data Leak <148.0.7778.168 (Linux/ChromeOS)
CVE-2026-8576 Published on May 14, 2026
Inappropriate implementation in CORS in Google Chrome on Linux and ChromeOS prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Products Associated with CVE-2026-8576
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 148.0.7778.168 and below 148.0.7778.168 is affected.