Security Advisory

CVE-2026-15768

6.5
MEDIUM

Vulnerability Description

Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: High)
Published Date July 14, 2026
Official Source NIST NVD Advisory