CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome's Extensions prior to version 151.0.7922.72 allows attackers to exploit malicious extensions to leak cross-origin data. This can lead to unauthorized access to sensitive information if users are tricked into installing compromised extensions. Organizations and users relying on Chrome should prioritize updating to the latest version to mitigate this risk.
CVE
CVE-2026-17781
Severity
MEDIUM
CVSS
4.3
EPSS
0.24%
Chrome
Original NVD Description
Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)