CVE Catalog
CVE-2026-7351
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk0.09%
1th percentile - higher than 1% of all known CVEs
Summary
Race condition vulnerability in MHTML in Google Chrome prior to 147.0.7727.138. An attacker who convinces a user to install a malicious extension can leak cross-origin data via a crafted Chrome Extension. (High severity per Chromium).
Risk Assessment
Risk includes cross-origin data theft via a malicious extension, potentially compromising user data confidentiality.
Recommendation
Update Google Chrome to version 147.0.7727.138 or later, and avoid installing unknown extensions.
Original NVD description (English source)
Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: High)