Google · Google Chrome · CVE-2026-7939
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 148.0.7778.96
**Description**
An inappropriate implementation in the SanitizerAPI allows a remote attacker to inject arbitrary scripts or HTML, leading to Universal Cross-Site Scripting (UXSS), which is a vulnerability that allows an attacker to execute scripts across different origins, by using a crafted HTML page.
**Recommendations**
Update to version 148.0.7778.96 or later.