Security Risk Category

extensions-api Security Risks

Published vulnerability pages connected to extensions-api. One risk can appear in multiple categories while keeping one canonical page.

extensions-api risks

Showing 1 of 1 published risks.

mediumEPSS 0.001

Google Chrome Extensions API Integer Overflow Out-of-Bounds Read Vulnerability

Integer overflow in Extensions API in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension. (Chromium security severity: High)

CVE-2026-15108chromechromiumbrowserextensions-api

Updated Jul 10, 2026