Skip to content
NewA calmer, faster ZeroHour

New Chrome Vulnerability Let Malicious Extensions Escalate Privileges via Gemini Panel

The Hacker Newsby @TheHackersNews ()3 min read2 · 1 read
Analyze CVE-2026-0628 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-0628
Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious…
8.87%

From the original article

3 min read at thehackernews.com

Cybersecurity researchers have disclosed details of a now-patched security flaw in Google Chrome that could have permitted attackers to escalate privileges and gain access to local files on the system. The vulnerability, tracked as CVE-2026-0628 (CVSS score: 8. 8), has been described as a case of insufficient policy enforcement in the WebView tag.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.