Incorrect Authorization in Google Chrome Extensions

CVE-2026-126866

What is CVE-2026-126866?

An incorrect authorization vulnerability exists in Google Chrome extensions prior to version 157.0.8103.78. This flaw allows remote attackers to exploit social engineering tactics to execute arbitrary code within the browser’s sandbox environment using a specially crafted Chrome extension. Users are advised to update their browsers promptly to mitigate the risk of such attacks, ensuring a safer browsing experience.

References