CWE-221

CWE-221 · 3 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-221, highest CVSS first.

  1. HIGH 8.8CVE-2026-1211342026-11-03

    Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

    chrome

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.3CVE-2026-760272026-10-30

    Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

    chrome

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-1062872026-10-06

    Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

    AI risk analysis on Exploit-DB.ai →