Remote Code Execution Vulnerability in Google Chrome Extensions
CVE-2026-12457
Currently unrated
What is CVE-2026-12457?
A significant flaw in Google Chrome prior to version 149.0.7827.155 was identified in the handling of Extensions. This vulnerability enabled a remote attacker, who successfully compromised the renderer process, to bypass the site isolation feature through the use of a specially crafted HTML page. This exploitation compromises the security model of Chrome by allowing unauthorized access to content across origins.
Affected Version(s)
Chrome 149.0.7827.155