Insufficient Input Validation in FedCM of Google Chrome

CVE-2026-8013

What is CVE-2026-8013?

A flaw in the FedCM feature of Google Chrome enables remote attackers to exploit insufficient validation of untrusted input. This vulnerability allows the leakage of cross-origin data through specially crafted HTML pages, posing a risk to user privacy and data security. It's crucial for users and administrators to keep their browsers updated to mitigate potential threats associated with this vulnerability.

References