Google Chrome Extensions Insufficient Policy Enforcement Vulnerability

Vulnerability

A vulnerability in Google Chrome Extensions prior to 148.0.7778.96 allowed remote attackers to bypass discretionary access control. This was achieved through a crafted HTML page that exploited insufficient policy enforcement in the renderer process.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of resources within the affected extension, potentially allowing for further exploitation of the browser or the user's data.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.

Added: May 6, 2026, 8:18 PM
Updated: May 6, 2026, 8:18 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
1.3
exploitability
3.6
remediation
7.7
relevance
7.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.