CVE Catalog
CVE-2026-18000
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.12%
2th percentile - higher than 2% of all known CVEs
Summary
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
Risk of cross-origin data leakage, potentially breaking isolation and confidentiality of user data.
Recommendation
Update Google Chrome on Android to version 151.0.7922.72 or later.
Original NVD description (English source)
Insufficient policy enforcement in USB in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)