Cross-Origin Data Leak via Malicious Extension in Google Chrome

CVE-2026-7351

What is CVE-2026-7351?

A race condition vulnerability in Google Chrome prior to version 147.0.7727.138 enables attackers to exploit crafted Chrome Extensions, leading to unauthorized cross-origin data leakage. Users may unknowingly install these malicious extensions, putting their sensitive information at risk. This vulnerability underscores the importance of maintaining updated browser versions and exercising caution when adding extensions.

References