CVE-2026-7979

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-346

Affected software

No affected versions have been published.

Timeline

Published
May 6, 2026
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-797925.6A flaw has been found in zackees transcribe-anything up to 4.1.0. Affected is the function ytdlp_download of the file src/transcribe_anythinCVE-2026-797934.3A vulnerability has been found in code-projects Online Shopping System 1.0. Affected by this vulnerability is an unknown functionality of thCVE-2026-797949.1A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attackerCVE-2026-797969.8Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated rCVE-2026-797978.8An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where applicaCVE-2026-797989.9SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated rCVE-2026-797998.8A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct CVE-2026-79808.8Use after free in WebAudio in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via CVE-2026-798008.8An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation coulCVE-2026-798019.8A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthCVE-2026-798028.8A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attackerCVE-2026-798038.8A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote
CVE-2026-7979: Medium severity, CVSS 4.3 | Vulnix