Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)
References
Configurations
No configuration.
History
21 Nov 2024, 09:50
Type | Values Removed | Values Added |
---|---|---|
References | () https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html - | |
References | () https://issues.chromium.org/issues/341136300 - |
01 Aug 2024, 14:00
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
|
CWE | CWE-366 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
16 Jul 2024, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-07-16 22:15
Updated : 2024-11-21 09:50
NVD link : CVE-2024-6778
Mitre link : CVE-2024-6778
CVE.ORG link : CVE-2024-6778
JSON object : View
Products Affected
No product.