CVE record · 2 sources
CVE-2026-15108
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.003 (p28)
- Exposure class
- Operating system, Browser
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Long Term Support Channel Update for ChromeOS
A new LTS-144 version 144.0.7559.259 (Platform Version: 16503.92.0), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 513602949 High CVE-2026-19141 Use after free in…
-
Stable Channel Update for Desktop
The Stable channel has been updated to 150.0.7871.114/.115 for Windows and Mac and 150.0.7871.114 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security…
-
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension…
Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension.…