PT-2026-41094
CVE-2026-8565
·
Published
2026-05-14
·
Updated
2026-08-31
Description by
CVSS 3.1
4.7
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:L
Name of the Vulnerable Software and Affected Versions
Google Chrome on Mac versions prior to 148.0.7778.168
Description
An inappropriate implementation in Downloads allows an attacker to perform UI spoofing via a crafted Chrome Extension, provided they can convince a user to install a malicious extension.
Recommendations
Update to version 148.0.7778.168 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾