Chrome Extension Policy Defect 149.0.7827.53 Bypass CSP
CVE-2026-11267 Published on June 4, 2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass content security policy via a crafted Chrome Extension. (Chromium security severity: Low)
Products Associated with CVE-2026-11267
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 149.0.7827.53 and below 149.0.7827.53 is affected.