CVE-2026-8005

Description

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicious network traffic. (Chromium security severity: Low)

References

https://issues.chromium.org/issues/496298665

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28113

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-4p7v-xggp-73p4

Risk Information

CVSS v2

CVSS v3

EPSS