Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Google
  • Chrome
Microsoft
  • Windows

Configuration 1 [-]

AND
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

No data.

References
Link Providers
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html cve-icon cve-icon cve-icon
https://issues.chromium.org/issues/525177160 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-15771 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-15771 cve-icon
History

Wed, 29 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title Insufficient Input Validation in Chrome Renderer Enables Process Memory Disclosure chromium-browser: chromium-browser: Insufficient validation of untrusted input in Media
Weaknesses CWE-125
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 28 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Insufficient Input Validation in Chrome Renderer Enables Process Memory Disclosure

Sat, 25 Jul 2026 09:00:00 +0000

Type Values Removed Values Added
Title Media Input Validation Flaw in Chrome Renderer Enables Memory Disclosure on Windows

Wed, 22 Jul 2026 08:45:00 +0000

Type Values Removed Values Added
Title Media Input Validation Flaw in Chrome Renderer Enables Memory Disclosure on Windows

Mon, 20 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Title Insufficient Validation of Media Input Leads to Memory Disclosure in Google Chrome

Thu, 16 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Title Insufficient Validation of Media Input Leads to Memory Disclosure in Google Chrome

Wed, 15 Jul 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 14 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 14 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-20
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2026-07-14T20:09:53.363Z

Updated: 2026-07-14T20:45:08.231Z

Reserved: 2026-07-14T18:31:16.324Z

Link: CVE-2026-15771

cve-icon Vulnrichment

Updated: 2026-07-14T20:45:05.393Z

cve-icon NVD

Status : Analyzed

Published: 2026-07-14T21:16:42.710

Modified: 2026-07-15T17:43:58.793

Link: CVE-2026-15771

cve-icon Redhat

Severity : Important

Publid Date: 2026-07-14T20:09:53Z

Links: CVE-2026-15771 - Bugzilla