CVE-2026-76027
Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted
CVSS
4.3
Média
EPSS
0.2%
p14
KEV
—
Exploit Today
4
0-100
Publicado: 30 de out. de 2026 · Última mod.: 3 de nov. de 2026 · CWE-221
0.2%EPSS · 30 dias0.2%
2026-10-302026-11-07
Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1211348.8 ALT24.4%
——7Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)3dCVE-2026-1132388.8 ALT35.0%
——11Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1131088.8 ALT37.6%
——11Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1130266.5 MÉD36.8%
——11Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)4dCVE-2026-1062874.3 MÉD10.5%
——3Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)25dCVE-2026-875356.5 MÉD27.6%
——8Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)58d