CVE-2026-7941 - AskarLabs CVE Database

CVE-2026-7941

Vendor Google

Product Chrome

Weakness CWE-20 · Input validation

Published May 6, 2026

Last update May 6, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Insufficient validation of untrusted input in Mobile in Google Chrome on Android prior to 148.0.7778.96 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium security severity: Medium)

Key dates

02Disclosure timeline

May 6, 2026 CVE published

May 6, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-7941 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Related vulnerabilities

04Related CVE

CVE-2019-1598 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities CVE-2020-3127 Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerabilities CVE-2023-40314 Cross-site scripting in bootstrap.jsp CVE-2023-38156 Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability CVE-2021-25512