VULNERABILITY INTELLIGENCE

CVE-2026-12017

CVSS score3.1 LOW

EPSS probability0.21%

CISA KEVNot currently listed

Published2026-06-11

Last modified2026-10-25

Description

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)