CVE-2026-17755

Google Chrome versions prior to 151.0.7922.72 are vulnerable to UI spoofing due to an incorrect security interface in Extensions. An attacker who successfully convinces a user to install a malicious extension can exploit this flaw to present a crafted, deceptive interface. This vulnerability affe...

CVE-2025-12445

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...