CVE-2026-9944
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
Risk Assessment
The risk involves potential theft of confidential data across origins, which could lead to a breach of the same-origin policy and disclosure of sensitive user information.
Recommendation
Immediately update Google Chrome to version 148.0.7778.216 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)