Insufficient Policy Enforcement in Google Chrome Enhances Security Risk
CVE-2026-8004

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
6 May 2026

What is CVE-2026-8004?

A flaw in Google Chrome's DevTools has been identified, allowing attackers to exploit insufficient policy enforcement mechanisms. This vulnerability presents a risk when users are persuaded to install malicious extensions, potentially leading to unauthorized access to sensitive cross-origin data. Mitigation strategies should be prioritized to prevent exploitation and enhance browser security.

Affected Version(s)

Chrome 148.0.7778.96

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.