EUVD-2026-40514
GHSA-frg2-jw92-vc8v
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Web-delivered exploit via crafted HTML requires victim navigation (UI:R, PR:N); memory read yields confidentiality loss only, no write or crash capability (I:N, A:N).
Primary rating from Vendor (google).
CVSS VectorVendor: google
Lifecycle Timeline
4DescriptionCVE.org
Inappropriate implementation in Enterprise in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Memory disclosure in Google Chrome's Enterprise policy implementation exposes sensitive process memory contents to remote attackers who can direct victims to a crafted HTML page. All Chrome desktop releases prior to 150.0.7871.47 are affected. No public exploit code exists and CISA SSVC classifies exploitation status as none, but the high confidentiality impact and zero-privilege-required attack path make prompt patching advisable for enterprise-managed Chrome deployments.
Technical ContextAI
The vulnerability resides in the Enterprise component of Google Chrome - specifically the code governing managed browser policy enforcement and enterprise configuration handling. CWE-284 (Improper Access Control) indicates the root cause is inadequate enforcement of access boundaries, allowing logic in the Enterprise subsystem to read regions of process memory that should be inaccessible to web content. When a crafted HTML page is processed, the inappropriate implementation fails to restrict memory access correctly, leaking contents of the renderer or browser process memory. The Chromium issue tracker reference (issues.chromium.org/issues/513399832) and the Chrome Releases advisory confirm this is a discrete component flaw rather than a V8/JavaScript engine issue. The EUVD entry EUVD-2026-40514 and the CVSS vector (AV:N/AC:L/PR:N/UI:R/S:U) corroborate that the attack surface is entirely web-facing.
RemediationAI
The primary remediation is upgrading Google Chrome to version 150.0.7871.47 or later, as confirmed by the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. Enterprise administrators should push this update via their management platform (Google Admin Console, Intune, or equivalent) and verify deployment using Chrome's version reporting. As a compensating control prior to patching, restricting navigation to untrusted external websites through enterprise URL allow-listing policies (chrome://policy) reduces exposure but may impact productivity. Disabling JavaScript execution via enterprise policy is a more aggressive workaround that would prevent crafted-page exploitation but breaks most modern web applications. Safe Browsing Enhanced Protection mode does not directly mitigate memory disclosure flaws of this class. No patch version conflict or side effect of upgrading to 150.0.7871.47 has been identified in the advisory.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today