PT-2026-50206

CVE-2026-12456

Published

2026-05-27

Updated

2026-10-29

Description by

CVSS 3.1

4.2

Medium

MetricsAV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155

Description An inappropriate implementation in Extensions allows an attacker to bypass the Same Origin Policy (SOP)—a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin—by convincing a user to install a crafted malicious extension.

Recommendations Update to version 149.0.7827.155 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2026-12456

BDU:2026-13213

ECHO-325B-E7C6-A4D0