CVE-2026-15108 is an integer overflow vulnerability in the Extensions API of Google Chrome versions before 150.0.7871.115. Exploitation requires user interaction to install a malicious extension, which can then trigger an out-of-bounds memory read. This vulnerability could lead to information disclosure or other memory safety issues. The vulnerability is publicly disclosed but no explicit patch or remediation level is stated in the provided data. The vendor advisory link points to a Chrome stable channel update announcement, which likely includes the fix in version 150.0.7871.115 or later.

Successful exploitation allows an attacker to read memory out of bounds, potentially exposing sensitive information or causing instability in the browser. The attack requires user installation of a malicious extension, limiting the attack vector to social engineering or similar methods. There is no indication of known exploits in the wild.

A fix is available in Google Chrome version 150.0.7871.115. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation depends on applying the update. Check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for confirmation and further guidance.