Not scored
CVE-2026-1504
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 17% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Coverage 1 article · 1 outlet
- Chrome Patches High-Severity Background Fetch Flaw (CVE-2026-1504)SecurityOnline · first in our coverage