Vulnerabilities & Exploits

Chrome Patch Fixes Privilege Flaw in Gemini Live Panel

The flaw could let malicious extensions with only basic permissions hijack the Live panel.

1 source · Mar 6

CVE-2026-0628

NVD KEV

CVSS 8.8 HIGH: insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who… EPSS 7% (93rd percentile).

Timeline

Sources

Vendor digest: Microsoft

Part of the PlainSec briefing for 2026-03-06

Every edition of this story: Chrome Patch Fixes Privilege Flaw in Gemini Live Panel

More from today