PT-2026-38145

CVE-2026-7952

Published

2026-03-25

Updated

2026-08-31

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96

Description Insufficient policy enforcement in Extensions allows a remote attacker who has compromised the renderer process to bypass discretionary access control (a type of access control where the owner of an object decides who is granted access) via a crafted HTML page.

Recommendations Update to version 148.0.7778.96 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-693: Protection Mechanism Failure

Related identifiers

CVE-2026-7952

BDU:2026-07084

ECHO-E0F2-4395-BFEE