Google and Microsoft disclosed CVE-2026-7937 on May 6, 2026, a medium-severity Chromium flaw in Chrome’s DevTools policy enforcement that, before Chrome 148.0.7778.96, let a malicious extension bypass navigation restrictions after persuading a user to install it on Windows, macOS, or Linux...