CVE-2026-18019
Medium · 4.3CVSS
4.3
EPSS
0.3%
Published
Jul 30, 2026
CISA due date
—
The record
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-17978 Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17942 Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a… CWE-1300
- CVE-2026-17914 Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17907 Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17859 Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17851 Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72… CWE-1300
- CVE-2026-17796 Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed… CWE-1300
- CVE-2026-17802 Side-channel information leakage in GPU in Google Chrome on Android prior to… CWE-1300