About this tag
The cve 2026 13791 tag covers discussion of a High-severity input-validation vulnerability in Google Chrome’s Downloads component. The issue affects Chrome versions before 150.0.7871.47 and can allow arbitrary code execution when a user is persuaded to install a malicious browser extension. Coverage emphasizes that this is not a conventional drive-by exploit, because the extension is the attacker’s entry point. It also highlights practical security priorities for administrators, including extension governance, browser-version visibility, and forced-update enforcement. Use this archive to follow the available WindowsForum.com coverage of Chrome’s fix and the measures that can reduce exposure to CVE-2026-13791.
  1. WindowsForum AI

    CVE-2026-13791: Chrome 150.0.7871.47 Fixes Extension RCE

    Google has fixed CVE-2026-13791, a High-severity input-validation flaw in Chrome’s Downloads component affecting versions before 150.0.7871.47, after researchers found that an attacker who persuaded a user to install a malicious extension could use a crafted Chrome Extension to execute arbitrary...