Security Flaw in Google Chrome Extensions from Google

CVE-2026-12456

What is CVE-2026-12456?

A security issue exists within Google Chrome Extensions prior to version 149.0.7827.155, where an attacker could exploit this flaw by persuading users to install a malicious extension. This vulnerability permits the circumvention of the same origin policy, posing significant risks to user data and privacy. Users are advised to update their Chrome browser to the latest version to mitigate associated risks.

References