Live · 98 sources · updated 28m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

CVE record · 2 sources

CVE-2026-126856

Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

Vendor
Google
Product
Chrome
Weakness
CWE-459
Exposure class
Operating system, Browser

Coverage

3

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

  1. Chrome release Chrome Releases

    Long Term Support Channel Update for ChromeOS

    A new LTS-150 version 150.0.7871.289 (Platform Version: 16700.70.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 579818899 High CVE-2026-126901 Use after free in PDF…

  2. Chrome release Chrome Releases

    Extended Stable Update for Desktop

    The Extended Stable channel has been updated to 156.0.8078.100 for Windows and Mac which will roll out over the coming days/weeks. Security Fixes Note: Access to bug details and links may be kept restricted until a majority of…

  3. CVE NVD

    Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.

    Incomplete cleanup in Cache in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help