CVE-2026-106354 | Google Chrome up to 154.0.8037.97 Extensions cross-domain policy

October 6, 2026 Yanac

A vulnerability classified as problematic was found in Google Chrome. Impacted is an unknown function of the component Extensions. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains.

The identification of this vulnerability is CVE-2026-106354. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More