> CVE-2026-18019

« BACK_TO_HOME
PUBLISHED
2026-07-30 01:17
MODIFIED
2026-07-30 01:17
EPSS (Prob. Exploit)
0.26%
Top 83.3%
DATA SOURCES:
NVD 🔗 2026-07-30 RED HAT 🔗 2026-08-02 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 MSRC 🔗 2026-11-02

> DESCRIPTION

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-1300

> CWE DETAILED DESCRIPTIONS

CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Low

> HISTORIQUE DES MODIFICATIONS

Première apparition
30/07/2026 01:17
Source: NVD
📊 ENRICHISSEMENT 02/08/2026 05:00
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 02/08/2026 05:00
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to pa...
Total des modifications: 3 Dernière mise à jour: 3 months ago

> REFERENCES

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_...
https://issues.chromium.org/issues/525691898
« BACK_TO_HOME