> CVE-2026-8005

« BACK_TO_HOME
PUBLISHED
2026-05-06 19:16
MODIFIED
2026-05-06 19:19
EPSS (Prob. Exploit)
0.10%
Top 99.0%
DATA SOURCES:
NVD 🔗 2026-05-06 RED HAT 🔗 2026-05-10 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 MSRC 🔗 2026-11-02

> DESCRIPTION

Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin policy via malicious network traffic. (Chromium security severity: Low)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-20

> CWE DETAILED DESCRIPTIONS

CWE-20: Improper Input Validation - The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Low

> HISTORIQUE DES MODIFICATIONS

Première apparition
06/05/2026 19:16
Source: NVD
📊 ENRICHISSEMENT 01/06/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-20: Improper Input Validation - The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process...
📊 ENRICHISSEMENT 10/05/2026 05:02
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Low", "severity_scale": null }
📊 ENRICHISSEMENT 10/05/2026 05:02
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 5 months ago

> REFERENCES

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop....
https://issues.chromium.org/issues/496298665
« BACK_TO_HOME