Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2026-7971

Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

VectorNETWORK

PublishedMay 06, 2026, 19:16

Published Bychrome-cve-admin@google.com

Base Score

Score6.3

Affected Versions

No affected versions found.

References

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
https://issues.chromium.org/issues/497529290

Weakness Type

CWE-269

CVSS Metrics

Base Score

6.3

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK