CVE-2026-78960: Information leak in Google Chrome
Description
CVE-2026-78960 is an information leak vulnerability in Google Chrome extensions prior to version 152.0.7977.65. It allows a remote attacker to obtain cross-origin data by tricking a user into installing a crafted Chrome extension. The vulnerability has a medium severity rating and requires user interaction for exploitation.
CVSS v3.1
Score 6.5medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an information leak in Google Chrome extensions before version 152.0.7977.65. A remote attacker can leverage social engineering to convince a user to install a maliciously crafted extension, which then can access cross-origin data improperly. The issue is classified under CWE-200 (Information Exposure) and has a CVSS 3.1 base score of 6.5, indicating a moderate impact on confidentiality without affecting integrity or availability.
Potential Impact
An attacker who successfully exploits this vulnerability can obtain sensitive cross-origin data from the browser context, potentially exposing user information. However, exploitation requires user interaction (installing the malicious extension), and there is no impact on data integrity or system availability.
Mitigation Recommendations
Users and administrators should update Google Chrome to version 152.0.7977.65 or later, where this vulnerability is fixed. Since the patch status is indicated by the version boundary, upgrading to this version or beyond mitigates the issue. No additional vendor advisory content is provided, so check official Google Chrome security advisories for confirmation and further guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7jv8-r36r-863g
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-78960"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a92f814acd9273b49e90e27
Added to database: 08/29/2026, 15:17:40 UTC
Last enriched: 09/09/2026, 18:52:52 UTC
Last updated: 10/11/2026, 18:48:22 UTC
Views: 27
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.