CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17882

CVE-2026-17882 is a policy-bypass flaw in Chrome Extensions. Affects the Extensions component of Google Chrome before 151.0.7922.72; a user tricked into installing a malicious extension could bypass site isolation via a crafted Chrome Extension. Upstream chromium issue 523637452 is cited. Accordi...

CVE-2026-17882

Policy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17821

Affected product: Google Chrome Extensions component (Chromium-based browser). Vulnerable: Extensions policy enforcement vulnerability that allowed bypassing navigation restrictions via a crafted Chrome Extension, due to insufficient policy enforcement. Root cause: upstream Chromium issue 5175979...

CVE-2026-17821

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

EUVD-2026-50770

Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17786

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

EUVD-2026-50727

Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17778

Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17755

Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-17749

CVE-2026-17749: Insufficient validation of untrusted input in Chrome extensions. Affects Google Chrome prior to 151.0.7922.72; exploitation could enable sandbox escape via a maliciously crafted extension. The connected advisories (Debian/OpenSUSE) enumerate this CVE among Chromium fixes and confi...

PT-2026-66097

Use after free in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

PT-2026-66105

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

PT-2026-66140

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient policy enforcement in Extensions allows an attacker to bypass navigation restrictions. This occurs when a user is convinced to install a crafted malicious extension...

Linux Distros Unpatched Vulnerability : CVE-2026-17920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-17898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrar...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Extensions in Google Chrome before version 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption through a crafted Chrome Extension. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

In the version of Google Chrome for Linux prior to 149.0.7827.53, the “Out of bounds read” vulnerability in Extensions allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory through a crafted Chrome Extension...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to execute arbitrary code inside a sandbox via a crafted Chrome Extension. Chromium security severity: Low...