VDB

CVE-2026-7993

CVE-2026-7993 PUBLISHED CVSS 4.199999809265137 MEDIUM

Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

EPSS 0.08% · 23.5th percentile

Risk Scores

CVSS v3.1
4.199999809265137
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L
EPSS Score
0.08%
23.5th percentile

Affected Products

VendorProductVersions
GoogleChrome148.0.7778.96
googlechrome0

Timeline

  • May 6, 2026 CVE Published
  • May 6, 2026 CVE Updated
  • May 7, 2026 EPSS Score
  • May 7, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
  • May 13, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›