Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar
2026-07-14T13:24:08Z•d355598c3a7263c06eafe5e2a0e7471aa23e5168fe3d3bc07683a86c4c595d8a
ApprouterCMMCCalendarChromeClaudeBleedCommerce CloudGmailJscramblerNPMNetWeaverOAuthPentagonRCERabbitMQRussian-APTSAPValarianZimbrabrowser-extensioncredential-stealercritical-infrastructurecritical-vulnerabilitiescybersecurity-M&Arouterssupply-chain-attack
What happened
SecurityWeek roundup (14 Jul 2026) details multiple high-impact vulnerabilities and cyber incidents: an unpatched 'ClaudeBleed' Chrome-related flaw reportedly persists across patches and can let extensions read Gmail and Calendar; SAP released patches for critical issues in NetWeaver, Approuter and Commerce Cloud that could enable data access/modification, desynchronization and denial-of-service; US and allies warn of Russian state-sponsored campaigns compromising poorly secured routers in critical infrastructure networks; several Jscrambler NPM packages were poisoned in a supply-chain attack,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- d355598c3a7263c06eafe5e2a0e7471aa23e5168fe3d3bc07683a86c4c595d8a
- Enrichment time
- 2026-07-14T13:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.