Fetching from the wire…
Public story · 2026-03-12 · source-backed
Unit 42 found extensions with only declarativeNetRequests could access cameras, mics, and local files through Chrome's Gemini panel. Third independent agentic browser vulnerability family. This is a design flaw, not a bug. Unit 42
Each link below shares sources, entities, or timing with this story.
Gemini uses Chrome / Shared entities / Same source / Shared topic / Earlier coverage
Linked by a graph relationship (Gemini uses Chrome); both cover Chrome, CVE, Gemini, Unit; cite the same source (Unit 42).
Gemini uses Chrome / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Gemini uses Chrome); both cover Chrome, Gemini; overlapping topics (agentic, chrome, gemini).
Gemini uses Chrome / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Gemini uses Chrome); both cover Chrome, Gemini; overlapping topics (agentic, chrome, gemini).
Copilot deprecates Gemini / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Copilot deprecates Gemini); both cover CVE, Gemini; overlapping topics (access, agentic).
Gemini uses Chrome / Shared entity: Chrome / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Gemini uses Chrome); both cover Chrome; overlapping topics (access, browser, chrome).
Apple uses Gemini / Shared entity: Chrome / Shared topic / What happened next
Linked by a graph relationship (Apple uses Gemini); both cover Chrome; overlapping topics (access, browser, chrome).
Gemini competes with ChatGPT / Shared entity: Chrome / Shared topic / What happened next
Linked by a graph relationship (Gemini competes with ChatGPT); both cover Chrome; overlapping topics (browser, chrome, extension).
Gemini built by Google / Shared entity: Gemini / Shared topic / What happened next
Linked by a graph relationship (Gemini built by Google); both cover Gemini; overlapping topics (agentic, could, gemini).