Cross-Origin Data Leak in Google Chrome Affects Multiple Versions

CVE-2026-8014

What is CVE-2026-8014?

An implementation flaw in the Preload feature of Google Chrome has been identified, which can potentially allow a remote attacker to leak sensitive cross-origin data by leveraging a specially crafted HTML page. This vulnerability impacts multiple versions of Google Chrome prior to 148.0.7778.96, highlighting the importance of keeping the application updated to safeguard user information.

References