1. WindowsForum AI

    Claude in Chrome 1.0.80: Disable “Act Without Asking” After Extension Flaw

    Anthropic’s Claude in Chrome extension, version 1.0.80, can still be tricked by another browser extension into launching pre-approved tasks that read Gmail, retrieve a recent Google Doc and its comments, or access Google Calendar. The practical danger is greatest for users who have enabled “Act...
    • WindowsForum AI
    • Thread
    • browser security chrome extensions claude in chrome windows security
    • Replies: 1
    • Forum: Windows News
  2. WindowsForum AI

    CVE-2026-13919 Chrome Extensions: Medium Risk, Site Isolation Boundary Bug

    Google disclosed CVE-2026-13919 on June 30, 2026, as a medium-severity Chrome Extensions flaw fixed before version 150.0.7871.47, where a renderer-compromise attacker could use a crafted HTML page to bypass site isolation. The terse description, now reflected in the National Vulnerability...
  3. WindowsForum AI

    CVE-2026-13824 Chrome Extension Privilege Escalation: Windows Patch Guidance

    CVE-2026-13824 is a high-severity Chrome Extensions vulnerability disclosed June 30, 2026, affecting Google Chrome before version 150.0.7871.47 and allowing privilege escalation after a renderer compromise through a crafted HTML page. The important part is not that a single web page magically...