{"id":1140,"date":"2026-03-03T05:25:52","date_gmt":"2026-03-03T05:25:52","guid":{"rendered":"https:\/\/securis360.com\/blog\/?p=1140"},"modified":"2026-03-03T05:25:52","modified_gmt":"2026-03-03T05:25:52","slug":"new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel","status":"publish","type":"post","link":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/","title":{"rendered":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Cybersecurity researchers have uncovered a serious <a href=\"https:\/\/securis360.com\/vulnerability-assessment-and-penetration-testing-VAPT-solutions.shtml\">security vulnerability <\/a>in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as <strong>CVE-2026-0628<\/strong>, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With a <strong>CVSS score of 8.8<\/strong>, the vulnerability was considered high severity and had the potential to give attackers access to local files, the camera, microphone, and other sensitive browser functions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Google has since patched the issue in <strong>Chrome version 143.0.7499.192\/193<\/strong>, released in January 2026 for Windows, Mac, and Linux.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Understanding CVE-2026-0628<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability stems from <strong>insufficient policy enforcement in Chrome\u2019s WebView tag<\/strong>, which allowed attackers to manipulate privileged browser pages using specially crafted browser extensions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to the official vulnerability description, attackers could exploit the flaw if they successfully convinced a user to install a malicious extension. Once installed, the extension could inject scripts or HTML into privileged Chrome pages.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This injection allowed attackers to bypass standard browser security boundaries and execute unauthorized actions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cybersecurity researcher <strong>Gal Weizman from Palo Alto Networks Unit 42<\/strong> discovered and reported the flaw on <strong>November 23, 2025<\/strong>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">How the Gemini Panel Became an Attack Vector<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Google integrated <strong>Gemini AI into Chrome in September 2025<\/strong>, introducing a side panel that allows users to interact with the AI assistant directly inside the browser.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Gemini panel provides several powerful capabilities, including:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Content summarization<\/li>\n\n\n\n<li>Website translation<\/li>\n\n\n\n<li>Automated browsing tasks<\/li>\n\n\n\n<li>Interaction with system resources<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">However, these powerful capabilities also introduced new security risks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability allowed malicious extensions with minimal permissions to <strong>take control of the Gemini Live panel<\/strong>. Attackers could then inject JavaScript code into the Gemini interface and execute commands with elevated privileges.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This effectively allowed attackers to perform actions that regular browser extensions normally cannot.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Potential Impact of the Vulnerability<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">If exploited successfully, the vulnerability could allow attackers to perform several high-risk actions on a victim\u2019s system.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Access to Local Files<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers could gain access to sensitive files stored on the user\u2019s computer.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Camera and Microphone Activation<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Malicious code could activate the device\u2019s camera and microphone without user permission.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Website Screenshot Capture<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers could capture screenshots of any website visited by the user.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Arbitrary Code Execution<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The injected code could run within the Gemini panel context, giving attackers extended control over browser behavior.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These capabilities essentially <strong>break the browser\u2019s standard security model<\/strong>, which normally isolates extensions from privileged browser components.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Role of the declarativeNetRequest API<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">One key element that enabled this attack was the <strong>declarativeNetRequest API<\/strong>, a Chrome extension feature designed to intercept and modify web requests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This API is commonly used by extensions such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ad blockers<\/li>\n\n\n\n<li>Privacy tools<\/li>\n\n\n\n<li>Content filtering extensions<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">However, researchers discovered that attackers could abuse this API to inject malicious JavaScript into the Gemini panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because the Gemini panel runs in a <strong>high-privilege browser environment<\/strong>, the injected code gained access to powerful system capabilities.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">AI Integration Is Expanding the Browser Attack Surface<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This incident highlights an important security concern surrounding the integration of artificial intelligence directly into browsers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Modern AI-powered browser features require deeper access to browsing environments so they can perform complex tasks such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Multi-step web automation<\/li>\n\n\n\n<li>Content analysis<\/li>\n\n\n\n<li>Data extraction<\/li>\n\n\n\n<li>Context-aware assistance<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">While these features improve productivity, they also expand the <strong>attack surface for cybercriminals<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers warn that AI browser assistants could become targets for attacks involving:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cross-site scripting (XSS)<\/li>\n\n\n\n<li>Privilege escalation<\/li>\n\n\n\n<li>Side-channel attacks<\/li>\n\n\n\n<li>Prompt injection via malicious web pages<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If attackers embed hidden instructions or prompts inside malicious web pages, AI assistants may unknowingly execute harmful actions.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Why Browser Extensions Remain a Major Security Risk<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Browser extensions remain one of the most common entry points for cyber attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even legitimate extensions may request excessive permissions that can later be abused.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this case, the attacker only needed to convince the victim to install a specially crafted extension. Once installed, the extension could inject arbitrary code into the Gemini panel and exploit its privileged environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This highlights the importance of carefully reviewing extension permissions before installation.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">How Users Can Protect Themselves<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Although Google has already patched the vulnerability, users should follow basic security practices to reduce the risk of browser-based attacks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Update Chrome Immediately<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ensure Chrome is updated to <strong>version 143.0.7499.192 or later<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Install Extensions Carefully<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Only install extensions from trusted developers and avoid unknown or suspicious add-ons.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Review Extension Permissions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Check what permissions each extension requests and remove unnecessary ones.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Remove Unused Extensions<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Extensions you no longer use should be removed to reduce potential security risks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">5. Use Security Monitoring Tools<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Enterprise environments should monitor browser activity and extension installations.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Final Thoughts<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">The discovery of <strong>CVE-2026-0628<\/strong> demonstrates how new browser features, particularly AI-powered tools like the Gemini panel, can introduce unexpected security vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">While AI integration improves the browsing experience, it also creates new opportunities for attackers to exploit privileged browser environments.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As browsers continue evolving into AI-driven platforms, maintaining strong security controls around extensions, APIs, and privileged components will become increasingly important.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Users and organizations alike should remain vigilant and ensure browsers and extensions are always kept up to date.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1141,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[10],"tags":[670,677,678,672,673,674,675,447,669,671,676],"class_list":["post-1140","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-ai-browser-security-risks","tag-browser-privilege-escalation","tag-browser-security-threats","tag-chrome-extension-security","tag-chrome-vulnerability","tag-chrome-webview-vulnerability","tag-cve-2026-0628","tag-cybersecurity-news","tag-gemini-panel-vulnerability","tag-google-chrome-security-flaw","tag-malicious-browser-extensions"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"shubhrasharma665@gmail.com\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"News &amp; Update of Cyber Security World Globally | Securis360 -\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News &amp; Update of Cyber Security World Globally | Securis360\" \/>\n\t\t<meta property=\"og:description\" content=\"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-03-03T05:25:52+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-03-03T05:25:52+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/securis360\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@securis360\" \/>\n\t\t<meta name=\"twitter:title\" content=\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News &amp; Update of Cyber Security World Globally | Securis360\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@securis360\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#blogposting\",\"name\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News & Update of Cyber Security World Globally | Securis360\",\"headline\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\",\"author\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/author\\\/shubhrasharma665gmail-com\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/ChatGPT-Image-Mar-3-2026-10_45_59-AM.png\",\"width\":1536,\"height\":1024,\"caption\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\"},\"datePublished\":\"2026-03-03T05:25:52+05:30\",\"dateModified\":\"2026-03-03T05:25:52+05:30\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#webpage\"},\"articleSection\":\"News, AI browser security risks, browser privilege escalation, browser security threats, Chrome extension security, Chrome vulnerability, Chrome WebView vulnerability, CVE-2026-0628, cybersecurity news, Gemini panel vulnerability, Google Chrome security flaw, malicious browser extensions\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/securis360.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"name\":\"News\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"position\":2,\"name\":\"News\",\"item\":\"https:\\\/\\\/securis360.com\\\/blog\\\/category\\\/news\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#listItem\",\"name\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#listItem\",\"position\":3,\"name\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/category\\\/news\\\/#listItem\",\"name\":\"News\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/#organization\",\"name\":\"Securis360 Inc.\",\"description\":\"Securis360 is a global cybersecurity company providing Managed SOC, VAPT, SOC 2 Compliance, ISO 27001 Consulting, Cloud Security, SIEM, MDR, Incident Response and Cyber Risk Management services.\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/\",\"telephone\":\"+16195593838\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/cropped-final-logo-05.png\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#organizationLogo\",\"width\":512,\"height\":512,\"caption\":\"Securis360 Logo\"},\"image\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/securis360\",\"https:\\\/\\\/x.com\\\/securis360\",\"https:\\\/\\\/www.instagram.com\\\/securis360\",\"https:\\\/\\\/www.pinterest.com\\\/securis360\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@Securis360\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/securis360\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/author\\\/shubhrasharma665gmail-com\\\/#author\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/author\\\/shubhrasharma665gmail-com\\\/\",\"name\":\"shubhrasharma665@gmail.com\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#authorImage\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/wp-content\\\/litespeed\\\/avatar\\\/d9cfd1db106e641415395713203d73df.jpg?ver=1787826516\",\"width\":96,\"height\":96,\"caption\":\"shubhrasharma665@gmail.com\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#webpage\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/\",\"name\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News & Update of Cyber Security World Globally | Securis360\",\"description\":\"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/author\\\/shubhrasharma665gmail-com\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/author\\\/shubhrasharma665gmail-com\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/ChatGPT-Image-Mar-3-2026-10_45_59-AM.png\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#mainImage\",\"width\":1536,\"height\":1024,\"caption\":\"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\\\/#mainImage\"},\"datePublished\":\"2026-03-03T05:25:52+05:30\",\"dateModified\":\"2026-03-03T05:25:52+05:30\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/securis360.com\\\/blog\\\/\",\"name\":\"News & Update of Cyber Security World Globally | Securis360\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/securis360.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News &amp; Update of Cyber Security World Globally | Securis360<\/title>\n\n","aioseo_head_json":{"title":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News & Update of Cyber Security World Globally | Securis360","description":"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of","canonical_url":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#blogposting","name":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News & Update of Cyber Security World Globally | Securis360","headline":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel","author":{"@id":"https:\/\/securis360.com\/blog\/author\/shubhrasharma665gmail-com\/#author"},"publisher":{"@id":"https:\/\/securis360.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/securis360.com\/blog\/wp-content\/uploads\/2026\/03\/ChatGPT-Image-Mar-3-2026-10_45_59-AM.png","width":1536,"height":1024,"caption":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel"},"datePublished":"2026-03-03T05:25:52+05:30","dateModified":"2026-03-03T05:25:52+05:30","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#webpage"},"isPartOf":{"@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#webpage"},"articleSection":"News, AI browser security risks, browser privilege escalation, browser security threats, Chrome extension security, Chrome vulnerability, Chrome WebView vulnerability, CVE-2026-0628, cybersecurity news, Gemini panel vulnerability, Google Chrome security flaw, malicious browser extensions"},{"@type":"BreadcrumbList","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/securis360.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog\/category\/news\/#listItem","name":"News"}},{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog\/category\/news\/#listItem","position":2,"name":"News","item":"https:\/\/securis360.com\/blog\/category\/news\/","nextItem":{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#listItem","name":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel"},"previousItem":{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#listItem","position":3,"name":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel","previousItem":{"@type":"ListItem","@id":"https:\/\/securis360.com\/blog\/category\/news\/#listItem","name":"News"}}]},{"@type":"Organization","@id":"https:\/\/securis360.com\/blog\/#organization","name":"Securis360 Inc.","description":"Securis360 is a global cybersecurity company providing Managed SOC, VAPT, SOC 2 Compliance, ISO 27001 Consulting, Cloud Security, SIEM, MDR, Incident Response and Cyber Risk Management services.","url":"https:\/\/securis360.com\/blog\/","telephone":"+16195593838","logo":{"@type":"ImageObject","url":"https:\/\/securis360.com\/blog\/wp-content\/uploads\/2026\/03\/cropped-final-logo-05.png","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#organizationLogo","width":512,"height":512,"caption":"Securis360 Logo"},"image":{"@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#organizationLogo"},"sameAs":["https:\/\/www.facebook.com\/securis360","https:\/\/x.com\/securis360","https:\/\/www.instagram.com\/securis360","https:\/\/www.pinterest.com\/securis360\/","https:\/\/www.youtube.com\/@Securis360","https:\/\/www.linkedin.com\/company\/securis360"]},{"@type":"Person","@id":"https:\/\/securis360.com\/blog\/author\/shubhrasharma665gmail-com\/#author","url":"https:\/\/securis360.com\/blog\/author\/shubhrasharma665gmail-com\/","name":"shubhrasharma665@gmail.com","image":{"@type":"ImageObject","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#authorImage","url":"https:\/\/securis360.com\/blog\/wp-content\/litespeed\/avatar\/d9cfd1db106e641415395713203d73df.jpg?ver=1787826516","width":96,"height":96,"caption":"shubhrasharma665@gmail.com"}},{"@type":"WebPage","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#webpage","url":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/","name":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News & Update of Cyber Security World Globally | Securis360","description":"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/securis360.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#breadcrumblist"},"author":{"@id":"https:\/\/securis360.com\/blog\/author\/shubhrasharma665gmail-com\/#author"},"creator":{"@id":"https:\/\/securis360.com\/blog\/author\/shubhrasharma665gmail-com\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/securis360.com\/blog\/wp-content\/uploads\/2026\/03\/ChatGPT-Image-Mar-3-2026-10_45_59-AM.png","@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#mainImage","width":1536,"height":1024,"caption":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel"},"primaryImageOfPage":{"@id":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/#mainImage"},"datePublished":"2026-03-03T05:25:52+05:30","dateModified":"2026-03-03T05:25:52+05:30"},{"@type":"WebSite","@id":"https:\/\/securis360.com\/blog\/#website","url":"https:\/\/securis360.com\/blog\/","name":"News & Update of Cyber Security World Globally | Securis360","inLanguage":"en-US","publisher":{"@id":"https:\/\/securis360.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"News &amp; Update of Cyber Security World Globally | Securis360 -","og:type":"article","og:title":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News &amp; Update of Cyber Security World Globally | Securis360","og:description":"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of","og:url":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/","article:published_time":"2026-03-03T05:25:52+00:00","article:modified_time":"2026-03-03T05:25:52+00:00","article:publisher":"https:\/\/www.facebook.com\/securis360","twitter:card":"summary_large_image","twitter:site":"@securis360","twitter:title":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel - News &amp; Update of Cyber Security World Globally | Securis360","twitter:description":"Cybersecurity researchers have uncovered a serious security vulnerability in Google Chrome that could allow malicious browser extensions to escalate privileges and access sensitive user data. The flaw, identified as CVE-2026-0628, exposed a weakness in Chrome\u2019s policy enforcement mechanism related to the WebView component and the newly integrated Gemini AI panel. With a CVSS score of","twitter:creator":"@securis360"},"aioseo_meta_data":{"post_id":"1140","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"focus_keyword":null,"additional_keywords":null,"truseo_locale":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_custom_url":null,"og_image_custom_fields":null,"og_image_url":null,"og_image_width":null,"og_image_height":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_image_url":null,"twitter_title":null,"twitter_description":null,"schema_type":"default","schema_type_options":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"limit_modified_date":false,"ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":"2026-08-03 07:48:26","created":"2026-07-31 07:42:49","updated":"2026-08-03 07:48:26","reviewed_by":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/securis360.com\/blog\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/securis360.com\/blog\/category\/news\/\" title=\"News\">News<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tNew Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/securis360.com\/blog"},{"label":"News","link":"https:\/\/securis360.com\/blog\/category\/news\/"},{"label":"New Chrome Vulnerability Lets Malicious Extensions Escalate Privileges via Gemini Panel","link":"https:\/\/securis360.com\/blog\/new-chrome-vulnerability-lets-malicious-extensions-escalate-privileges-via-gemini-panel\/"}],"_links":{"self":[{"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/posts\/1140","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/comments?post=1140"}],"version-history":[{"count":0,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/posts\/1140\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/media\/1141"}],"wp:attachment":[{"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/media?parent=1140"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/categories?post=1140"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securis360.com\/blog\/wp-json\/wp\/v2\/tags?post=1140"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}