Insufficient Policy Enforcement in Google Chrome Affects Remote Data Leakage
CVE-2026-8011

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 May 2026

What is CVE-2026-8011?

A security flaw in Google Chrome prior to version 148.0.7778.96 enables a remote attacker to exploit insufficient policy enforcement. This vulnerability permits the leakage of cross-origin data through specially crafted HTML pages, potentially compromising sensitive information. Users of affected versions are advised to upgrade to the latest version to mitigate risks.

Affected Version(s)

Chrome 148.0.7778.96

References

https://chromereleases.googleblog.com/2026/05/stable-chan...
https://issues.chromium.org/issues/496626029

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.