Cross-Origin Data Leakage in Google Chrome by Google

CVE-2026-12458

What is CVE-2026-12458?

A vulnerability in Google Chrome prior to version 149.0.7827.155 enables a remote attacker to exploit weaknesses in the browser's handling of UI gestures. By crafting a malicious HTML page, an attacker can persuade users to interact with the page in a specific manner, potentially leaking sensitive cross-origin data. This flaw highlights the importance of secure UI design to prevent unauthorized data access.

References