Google Chrome Dawn Out-of-Bounds Read Vulnerability Allowing Cross-Origin Data Leak

Vulnerability

A high-severity out-of-bounds read vulnerability has been identified in the Dawn graphics engine of Google Chrome. This issue affects the Windows version of Chrome prior to 149.0.7827.103. The vulnerability allows remote attackers to leak cross-origin data by using a specially crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cross-origin data, potentially allowing for data leakage between different origins.

Remediation

Users can update to Google Chrome version 149.0.7827.103 to address this vulnerability.

Added: Jun 9, 2026, 12:52 AM
Updated: Jun 9, 2026, 12:52 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
3.8
remediation
7.7
relevance
9.3
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.