Vulnerabilities

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS)…

Inappropriate implementation in WebGL in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: High)

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Google

Product

chrome, chromium

Exposure class

Browser

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-15127 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 31
   Chrome release Chrome Releases 10 Aug 2026

   Long Term Support Channel Update for ChromeOS

   CVE-2026-19141CVE-2026-13281CVE-2026-19155+49 more Google
2. 11
   CVE NVD 8 Jul 2026

   Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted…

   CVE-2026-15131 Google
3. 17
   CVE NVD 8 Jul 2026

   Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS)…

   CVE-2026-15128 Google
4. 11
   CVE NVD 8 Jul 2026

   Inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox…

   CVE-2026-15125 Google
5. 17
   CVE NVD 8 Jul 2026

   Inappropriate implementation in DOM in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a…

   CVE-2026-15123 Google
6. 19
   Chrome release Chrome Releases 8 Jul 2026

   Stable Channel Update for Desktop

   CVE-2026-15112CVE-2026-15129CVE-2026-15132+24 more Google