← Back to CVE search

CVE-2026-15108

Google Chrome

Description

Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)

CVSS 4.3EPSS 0.125%Risk 0.43
View source
Published
2026-07-08 23:16:51
Affected versions
<150.0.7871.115
Type
Web application
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N