CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 151.0.7922.72 are vulnerable due to insufficient policy enforcement in Extensions, enabling attackers to inject arbitrary scripts or HTML through malicious extensions. This can lead to user data exposure and unauthorized actions within the browser. Users and organizations relying on Chrome should prioritize updates to mitigate potential exploitation risks.
CVE
CVE-2026-17739
Severity
MEDIUM
CVSS
4.2
EPSS
0.19%
Chrome
Original NVD Description
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)