CVE-2026-18004

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72

Description Insufficient policy enforcement in the Speech component allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. Cross-origin data leakage occurs when a website accesses data from a different origin than the one that served the page, violating the Same-Origin Policy (SOP), a security mechanism that prevents scripts on one page from accessing data on another page.

Recommendations Update Google Chrome to version 151.0.7922.72 or later.