New Chrome Vulnerability Let Malicious Extensions Escalate Privileges via Gemini Panel
Source: The Hacker News
Details
Cybersecurity researchers have disclosed details of a now‑patched security flaw in Google Chrome that could have permitted attackers to escalate privileges and gain access to local files on the system.
The vulnerability, tracked as CVE‑2026‑0628 (CVSS score: 8.8), was described as a case of insufficient policy enforcement in the WebView tag and was patched by Google in early January 2026.