VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 9, 2026

Debian chromium: Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.787…

CVE-2026-15124

Description

Insufficient policy enforcement in Passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)

Affected products

3
  • Google/Chromeinferred2 versions
    <150.0.7871.115+ 1 more
    • (no CPE)range: <150.0.7871.115
    • (no CPE)range: <150.0.7871.115
  • Chromium/Chromiumllm-fuzzy
    Range: <150.0.7871.115

Patches

Vulnerability mechanics

News mentions

1
CVE-2026-15124 · VYPR