VULNERABILITY INTELLIGENCE

CVE-2026-8005

CVSS score4.3 MEDIUM
EPSS probability0.10%
CISA KEVNot currently listed
Published2026-05-06
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicious network traffic. (Chromium security severity: Low)

Weakness classification

  • CWE-20: Improper Input Validation

Primary references