2477690 – (CVE-2026-8516) CVE-2026-8516 chromium-browser: chromium-browser: Insufficient validation of untrusted input in DataTransfer

Bug 2477690 (CVE-2026-8516) - CVE-2026-8516 chromium-browser: chromium-browser: Insufficient validation of untrusted input in DataTransfer

Summary: CVE-2026-8516 chromium-browser: chromium-browser: Insufficient validation of ...

Keywords:
Status:	NEW
Alias:	CVE-2026-8516
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	urgent
Severity:	urgent
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2477796 2477797
Blocks:
TreeView+	depends on / blocked

Reported:	2026-05-14 21:04 UTC by OSIDB Bzimport
Modified:	2026-05-15 07:19 UTC (History)
CC List:	0 users
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2026-05-14 21:04:44 UTC

Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Critical)

Note You need to log in before you can comment on or make changes to this bug.