CVE-2026-2317

Inappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

13 Feb 2026, 17:28

Type Values Removed Values Added
First Time Microsoft
Google
Linux linux Kernel
Linux
Google chrome
Microsoft windows
Apple macos
Apple
CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
References () https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html - () https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_10.html - Release Notes, Vendor Advisory
References () https://issues.chromium.org/issues/464173573 - () https://issues.chromium.org/issues/464173573 - Permissions Required

12 Feb 2026, 16:16

Type Values Removed Values Added
CWE CWE-200
CWE-352
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.5

11 Feb 2026, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-11 19:15

Updated : 2026-02-13 17:28


NVD link : CVE-2026-2317

Mitre link : CVE-2026-2317

CVE.ORG link : CVE-2026-2317


JSON object : View

Products Affected

microsoft

  • windows

linux

  • linux_kernel

google

  • chrome

apple

  • macos
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE-352

Cross-Site Request Forgery (CSRF)