CVE-2026-78955 | CyberRota

CyberRota Analysis

AI-Generated

Google Chrome versions prior to 152.0.7977.65 contain a vulnerability in the Performance APIs that could allow remote attackers to access cross-origin data through a specially crafted HTML page. This issue poses a medium security risk, making it essential for web developers and organizations relying on Chrome for secure browsing to prioritize updates to mitigate potential data exposure.

CVE

CVE-2026-78955

Severity

MEDIUM

CVSS

6.5

EPSS

0.44%

Chrome

Original NVD Description

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91748 HIGH CVE-2026-91747 LOW CVE-2026-91746 MEDIUM CVE-2026-91745 HIGH CVE-2026-91744 MEDIUM CVE-2026-91743 HIGH