Chrome DevTools Script Injection via Malicious Extension (<145)
CVE-2026-3063 Published on February 23, 2026
Inappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via DevTools. (Chromium security severity: High)
Products Associated with CVE-2026-3063
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-3063 are published in Google Chrome:
Affected Versions
Google Chrome:- Version 145.0.7632.116 and below 145.0.7632.116 is affected.