EUVD-2026-40770
GHSA-q2j9-m6g3-738j
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Network delivery via crafted page (AV:N, AC:L, PR:N), mandatory user navigation (UI:R), scope change due to cross-origin UXSS impact (S:C), limited confidentiality and integrity impact, no availability impact.
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
4DescriptionCVE.org
Insufficient validation of untrusted input in HTML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
Universal Cross-Site Scripting (UXSS) in Google Chrome before 150.0.7871.47 enables remote attackers to inject arbitrary scripts or HTML across security origins by serving a crafted HTML page to a victim user. The flaw stems from insufficient input validation in Chrome's HTML handling (CWE-20), and its Scope:Changed CVSS metric confirms the core danger: injected scripts escape the attacker-controlled origin and execute in the context of other web origins, undermining the browser's same-origin policy. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the victim be running Google Chrome prior to version 150.0.7871.47 on any desktop platform. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Several signals must be reconciled carefully here. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts or injects a malicious HTML page containing a crafted payload that exploits Chrome's insufficient input validation - for example, via a phishing email link or a malicious advertisement on a legitimate site. When a user running an unpatched Chrome version navigates to this page, the crafted HTML bypasses Chrome's sanitization, injecting scripts that execute across origins and allowing the attacker to read session cookies, steal credentials from open banking or email tabs, or perform actions on behalf of the victim in other web applications. |
| Remediation | Update Google Chrome to version 150.0.7871.47 or later via Chrome's built-in updater (Settings → Help → About Google Chrome) or through enterprise deployment tooling such as Google Admin or SCCM. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-20 – Improper Input Validation
View allSame technique Code Injection
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today