Insufficient Policy Enforcement in Google Chrome Affects Users
CVE-2026-5901

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
8 April 2026

What is CVE-2026-5901?

The vulnerability in Google Chrome involves insufficient policy enforcement within DevTools, which allowed attackers to manipulate cookie settings by persuading users to install harmful extensions. This exploitation provides a pathway for unauthorized cookie modification, potentially undermining enterprise security policies. Users are advised to update their browsers to the latest version to mitigate this issue.

Affected Version(s)

Chrome 147.0.7727.55

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.