Chromium: CVE-2026-17899 Insufficient policy enforcement in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-17899

creationtimestamp| type| source ---|---|--- 2026-07-30 05:19:27+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260730 2026-08-03 10:55:48+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803 2026-08-05...

CVE-2026-17899

Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2026-17899

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a privilege escalation flaw due to insufficient policy enforcement in DevTools . An attacker can exploit this by convincing a user to install a malicious extension and then using a crafted Chrome Extension to elevate privileges. The ...

Linux Distros Unpatched Vulnerability : CVE-2026-17899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to...