VULNERABILITY INTELLIGENCE

CVE-2026-12446

CVSS score4.3 MEDIUM

EPSS probability0.19%

CISA KEVNot currently listed

Published2026-06-17

Last modified2026-10-26

Description

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)