Privilege escalation via malicious extension in Chrome Gemini WebView
CVE-2026-0628 is a high-severity insufficient policy enforcement flaw in Google Chrome’s WebView handling, affecting Chrome prior to 143.0.7499.192/.193. The issue arises when gemini.google.com/app is rendered inside Chrome’s privileged Gemini/Gemini Live side-panel WebView rather than a normal browser tab. A crafted Chrome extension, reportedly requiring only basic permissions such as declarativeNetRequest/declarativeNetRequests, could intercept and modify traffic to that panel and inject HTML or JavaScript into the privileged page. Because the Gemini panel is a trusted browser-integrated component with elevated capabilities, injected code could execute in a more privileged context than the extension normally has. Public reporting ties the flaw specifically to Chrome’s Gemini panel implementation and describes the root cause as insufficient policy enforcement in the WebView tag.
Are you exposed to this one?
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
Impact, mitigation & remediation
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
Impact
What an attacker gets, and what they’ve been doing with it.
Mitigation
If you can’t patch tonight, do this now.
Remediation
Patch, then assume compromise.
Exploits
1 valid exploit after Mallory filtered fakes, detection scripts, and README-only repos (1 hidden).
This repository is a proof-of-concept (PoC) exploit for CVE-2026-0628, a vulnerability in Google Chrome (prior to version 143.0.7499.192) that allows a malicious extension to inject scripts into privileged Chrome pages (such as chrome://settings) using the <webview> tag. The repository contains a Chrome extension with a manifest (manifest.json), a background script (background.js) that listens for tab updates and injects a script when a privileged page is loaded, and an injection script (exploit/inject.js) that creates a <webview> element targeting a privileged page and executes arbitrary JavaScript within it. The PoC demonstrates replacing the content of a privileged page with a custom message, highlighting the security impact of the vulnerability. The README provides detailed instructions for reproducing the exploit and mitigation advice. No external network endpoints are used; the exploit targets internal Chrome URLs. The code is intended for educational and research purposes only.
Affected products & vendors
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
Recent activity
82 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
A high-severity vulnerability in Google's Gemini feature implementation in Chrome that can let an attacker access the browser environment and local operating system files.
High-severity Chrome Gemini AI panel issue enabling malicious extensions to inject code and access sensitive device capabilities (camera/microphone), as well as screenshots, local files, and phishing content within the panel.
An elevation-of-privilege vulnerability in Google Chrome’s Gemini AI integration (Gemini Live panel) that could allow a malicious browser extension with basic permissions to hijack the Gemini Live panel.
A Google Chrome vulnerability where malicious browser extensions could hijack the Gemini AI panel due to differing request handling between the special AI panel and regular tabs, enabling unauthorized access to sensitive resources and phishing from a trusted UI surface.
The version that knows your environment.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.