MEDIUM 4.2 NVD
CVE-2026-17739
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium security severity: Medium)
Affected Products
- google/chrome
References
- https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924
- https://issues.chromium.org/issues/498353463
This medium severity vulnerability with a CVSS score of 4.2 was published on 2026-07-30 via NVD. Affected: google/chrome.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.