Integer Overflow Vulnerability in Google Chrome's Extensions API

CVE-2026-15108

What is CVE-2026-15108?

An integer overflow vulnerability in the Extensions API of Google Chrome prior to version 150.0.7871.115 allows attackers to exploit this flaw by convincing users to install crafted malicious extensions. This vulnerability can lead to an out of bounds memory read, potentially exposing sensitive information or enabling further exploitation of the Chrome browser.

References