Cross-Origin Data Leakage in Google Chrome on Windows

CVE-2026-8556

What is CVE-2026-8556?

A flaw in the ANGLE component of Google Chrome prior to version 148.0.7778.168 on Windows allows attackers to potentially exploit the renderer process. By crafting a malicious HTML page, a remote attacker may bypass security controls and leak sensitive cross-origin data, thereby compromising user privacy and security.

References