VULNERABILITY INTELLIGENCE

CVE-2026-15108

CVSS score4.3 MEDIUM

EPSS probability0.20%

CISA KEVNot currently listed

Published2026-07-08

Last modified2026-10-25

Description

Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)