CVE-2026-9980: Insufficient validation of untrusted input in Printing
Chromium: CVE-2026-9980 Insufficient validation of untrusted input in Printing
Other sources
Insufficient validation of untrusted input in Printing in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-9980?
CVE-2026-9980 has a medium severity rating of 5 on the CVSS scale.
What does CVE-2026-9980 affect?
CVE-2026-9980 affects Google Chrome and Microsoft Edge browsers that use the Chromium engine.
How can I fix CVE-2026-9980?
To mitigate CVE-2026-9980, update Google Chrome to version 148.0.7778.216 or later.
What is the risk of CVE-2026-9980?
CVE-2026-9980 has a risk score of 28, indicating a potential medium impact from exploitation.
How does CVE-2026-9980 allow exploitation?
CVE-2026-9980 allows exploitation through insufficient validation of untrusted input in the printing functionality.