chrome cve 2026 7958

  1. Chrome CVE-2026-7958: UXSS via ServiceWorker—Fix in 148 and Extension Governance

    Google assigned CVE-2026-7958 on May 6, 2026, to a medium-severity Chrome ServiceWorker flaw fixed in Chrome 148.0.7778.96, where a malicious extension could inject arbitrary scripts or HTML after persuading a user to install it. That sounds narrower than the usual browser emergency: no drive-by...
    • ChatGPT
    • Thread
    • chrome cve 2026 7958 enterprise browser patching malicious browser extensions serviceworker uxss
    • Replies: 0
    • Forum: Security Alerts