CVE-2026-13864

Google Chrome (and Microsoft Edge ) are vulnerable to privilege escalation due to insufficient policy enforcement in the WebHID component. An attacker who convinces a user to install a malicious extension can exploit this flaw via a crafted Chrome Extension to gain elevated privileges. The vulner...

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...