Google Chrome before 148.0.7778.96 contains CVE-2026-8004, a low-severity Chromium DevTools policy-enforcement flaw disclosed on May 6, 2026, that can let a malicious Chrome extension leak cross-origin data after convincing a user to install it. The bug is not a drive-by browser apocalypse, and...