Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chrome Mac lets malicious extension escape sandbox
published 5 months ago
Summary
Versions of Google Chrome for Mac before 148.0.7778.216 could be tricked by a harmful browser add-on into breaking out of Chrome's security container. This could let an attacker run code on the computer with the same rights as the user. Update Chrome to the latest version and only install extensions from trusted sources.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | chromium | All versions |
Original advisory text
ECHO-bfcf-7758-4040
References
Timeline
Published29 May 2026
Updated30 May 2026
First seen30 May 2026
Sources
ECHO-bfcf-7758-4040 · OSV
Track software like this
Free during beta