CVE record · 1 source
CVE-2026-121088
Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted…
- Vendor
- Product
- Chrome
- Weakness
- CWE-862
- Exposure class
- Browser
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted…
Missing authorization in PerformanceAPIs in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)