Beveiligingsadvies

CVE-2026-7958

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-06 18:12:52

Laatst bijgewerkt 2026-05-06 21:55:20

Toegewezen door Chrome

CVSS-score 5.4

Status PUBLISHED

Beschrijving

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML (UXSS) via a crafted Chrome Extension. (Chromium security severity: Medium)

← Alle CVE's bekijken Bekijk op cve.org ↗