← Database

CVE-2026-7345

HIGH CVSS: 8.3 Published: 2026-04-28 Modified: 2026-07-24

Description

Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected Platforms

Microsoft WindowsLinux Linux KernelGoogle ChromeApple Macos

Weakness Type

CWE-20

References