Chrome <=152.0.7977.65 Extension CRX Origin Policy Bypass (CVE-2026-78947)
CVE-2026-78947 Published on August 25, 2026
Incomplete cleanup in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Low)
Vulnerability Analysis
CVE-2026-78947 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.
Weakness Type
What is an Insufficient Cleanup Vulnerability?
The software does not properly "clean up" and remove temporary or supporting resources after they have been used.
CVE-2026-78947 has been classified to as an Insufficient Cleanup vulnerability or weakness.
Products Associated with CVE-2026-78947
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 152.0.7977.65 and below 152.0.7977.65 is affected.