CVE-2026-13945
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk4th percentile — higher than 4% of all known CVEs
Summary
Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension.
Risk Assessment
The risk involves the possibility of tricking the user with a fake browser interface, which could lead to disclosure of sensitive data or unauthorized actions.
Recommendation
It is recommended to immediately update Google Chrome to version 150.0.7871.47 or later on all Linux systems. Also educate users to install extensions only from trusted sources.
Original NVD description (English source)
Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)