CVE-2026-8005

MEDIUM CVSS 4.3 View on NVD ↗

Description

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicious network traffic. (Chromium security severity: Low)

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

apple/macos google/chrome linux/linux_kernel microsoft/windows

References

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
https://issues.chromium.org/issues/496298665

Published: May 06, 2026 19:16 UTC Modified: May 07, 2026 13:54 UTC