PT-2026-56646 · Google · Google Chrome

CVE-2026-15127

·

Published

2026-06-14

·

Updated

2026-08-31

CVSS v2.0

6.4

Medium

VectorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115
Description An inappropriate implementation in WebGL allows a remote attacker to perform Universal Cross-Site Scripting (UXSS), which is a vulnerability that allows scripts to be executed across different origins, by using a crafted HTML page to inject arbitrary scripts or HTML.
Recommendations Update Google Chrome to version 150.0.7871.115 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-13628
CVE-2026-15127
ECHO-FAF9-FB6F-4A8E
OPENSUSE-SU-2026:11254-1
OPENSUSE-SU-2026:21498-1

Affected Products

Google Chrome