CVE-2026-87446
Description
A flaw was found in Google Chrome Extensions. This incomplete cleanup vulnerability allows a remote attacker, by leveraging social engineering, to install a crafted Chrome extension. This could lead to a bypass of system access restrictions.
Statement
Important severity is assigned to this vulnerability due to the potential for unauthorized access beyond application boundaries, although exploitation requires user interaction via deceptive techniques. Chromium is not distributed as part of standard Red Hat Enterprise Linux releases and is maintained only in community repositories such as EPEL. Consequently, exposure is confined to environments where users manually install the browser and execute untrusted third-party add-ons.
Understanding the Weakness (CWE)
Other,Confidentiality,Integrity
Technical Impact: Other; Read Application Data; Modify Application Data; DoS: Resource Consumption (Other)
It is possible to overflow the number of temporary files because directories typically have limits on the number of files allowed. This could create a denial of service problem.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
