CVE-2026-0115
Low · 2.1CVSS
2.1
EPSS
0.1%
Published
Mar 10, 2026
CISA due date
—
The record
In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-14074 Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to… CWE-1300
- CVE-2026-11289 Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed… CWE-1300
- CVE-2026-11284 Side-channel information leakage in PerformanceAPIs in Google Chrome prior to… CWE-1300
- CVE-2026-11153 Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed… CWE-1300
- CVE-2026-8562 Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168… CWE-1300
- CVE-2026-6923 A side-channel attack, which requires a physical presence to the TPM, can lead to… CWE-1300
- CVE-2026-8017 Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed… CWE-1300
- CVE-2026-5876 Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55… CWE-1300