CVE-2014-3172

The Debugger extension API in browser/extensions/api/debugger/debuggerapi.cc in Google Chrome before 37.0.2062.94 does not validate a tab's URL before an attach operation, which allows remote attackers to bypass intended access limitations via an extension that uses a restricted URL, as...

PT-2014-1374

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 37.0.2062.94 Description The issue exists due to the lack of URL validation in the Debugger extension API before an attach operation. This allows remote attackers to bypass access limitations by using an extensi...