CVE-2024-6778

2024-07-1621:43:47

Chrome

github.com

cve-2024-6778

race vulnerability

google chrome

devtools

privileged page

malicious extension

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "126.0.6478.182",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]