CyberRota Analysis
AI-GeneratedA vulnerability in Google Chrome's DevTools prior to version 151.0.7922.72 allows attackers to exploit insufficient policy enforcement, enabling the leakage of cross-origin data through malicious extensions. This poses a medium risk, particularly for users who frequently install third-party extensions. Organizations and individuals using affected versions of Chrome should prioritize updating to mitigate potential data exposure risks.
CVE
CVE-2026-17927
Severity
MEDIUM
CVSS
4.3
EPSS
0.13%
Chrome
Original NVD Description
Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)