PT-2026-38214

CVE-2026-8021

Published

2026-04-01

Updated

2026-08-31

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96

Description Script injection in the UI allows a remote attacker to inject arbitrary scripts or HTML (Universal Cross-Site Scripting - UXSS), which is a vulnerability that enables scripts to run across different origins in the browser. This occurs when a user is convinced to perform specific UI gestures while interacting with a crafted HTML page.

Recommendations Update Google Chrome to version 148.0.7778.96 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-94: Improper Control of Generation of Code (\'Code Injection\')

Related identifiers

CVE-2026-8021

BDU:2026-07947

ECHO-4E24-5182-3DDE