What is CVE-2026-2345?

CVE-2026-2345 is a low-severity vulnerability in Proctorio Secure Exam Proctor Extension, classified under Origin Validation Error. CVSS score: 3.6/10. Published 2026-02-11.

How severe is CVE-2026-2345?

Low severity. CVSS v3 base score is 3.6 out of 10.

Vulnerability in Proctorio Secure Exam Proctor Extension

CVE-2026-2345

Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly validate the origin of incoming messages. Specifically, an…

EPSS: 0.001 (0.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.6 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N.

Affected products

Proctorio Secure Exam Proctor Extension — versions 1.5.25220.33, 1.5.25220.36

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

7004884b-51e2-48e8-b4a2-5ca29e80453e

Frequently asked questions

What is CVE-2026-2345?: CVE-2026-2345 is a low-severity vulnerability in Proctorio Secure Exam Proctor Extension, classified under Origin Validation Error. CVSS score: 3.6/10. Published 2026-02-11.
How severe is CVE-2026-2345?: Low severity. CVSS v3 base score is 3.6 out of 10.