CVE-2026-9989 | Redsauce

Description

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to bypass same origin policy via a crafted video file. (Chromium security severity: High)

EPSS 0.1%

Published: 2026-05-28 23:16:57; View source
Affected versions: <148.0.7778.216
Type: Core software
Last modified: 2026-07-21 12:10:00
Operating systems: Windows; MacOS; Linux