CVE-2026-106416

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106416

A code injection vulnerability exists in Google Chrome (prior to version 155.0.8059.39 ) within the Extensions framework. A remote attacker can use social engineering to trick a user into installing a crafted browser extension, enabling the attacker to spoof user interface (UI) elements . This ma...

CVE-2026-106416

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106253

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the Extensions component. This vulnerability allows a remote attacker to obtain cross-origin data by utilizing a crafted Chrome extension. The issue has been addressed in version 155.0.8059.39 ....

EUVD-2026-93707

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within its Extensions component. A remote attacker can leverage social engineering to install a crafted Chrome extension that allows them to spoof UI elements . Exploitation details and specific proof-...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

EUVD-2026-93710

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106253

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106402

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106354

A flaw in the Extensions subsystem of Google Chrome (and chromium-browser ) prior to version 155.0.8059.39 allows for improper resource exposure. A remote attacker can exploit this by convincing a user to view a crafted HTML page , which enables them to obtain cross-origin data (information belon...

EUVD-2026-93704

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106354

Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CLEANSTART-2026-KC53993 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh

CVE-2026-39832 affects multiple packages. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh. See references for individual vulnerability details...

burp-extensions-montoya-api-examples

Example Extensions Extension| Description ---|--- Hello World| Prints output to various locations in Burp HTTP Handlers| Demonstrates performing various actions on requests passing through any tool in Burp Proxy Handlers| Demonstrates performing various actions on requests passing through the Pro...

PT-2026-107088

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-107003

Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted Chrome extension. Chromium security severity: Low...