Search: CVE-2026-0628

CVE-2026-0628 is a high-severity vulnerability in Google Chrome prior to version 143.0.7499.192. It involves insufficient policy enforcement in the WebView tag, allowing an attacker to trick a user into installing a malicious Chrome extension. This extension can inject scripts or HTML into privileged pages, potentially compromising confidentiality, integrity, and availability. Exploitation requires user interaction but no privileges or authentication. No known exploits exist in the wild. The vulnerability has a CVSS score of 8.8, indicating significant risk.