Proctorio vulnerabilities

Products

• Secure Exam Proctor Extension 1

Latest Proctorio CVEs

Newest publication first

1. CVE-2026-2345 Insufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers

   Published 2026-02-11

   Low·CVSS 3.6 EPSS 0.08%

   Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly validate the origin of incoming messages. Specifically, an internal messaging bridge processes messa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.