Malicious Extension Injection Attack in Chrome DevTools

CVE-2024-6778

Summary

A race condition in the DevTools component of Google Chrome prior to version 126.0.6478.182 can be exploited by attackers to inject malicious scripts or HTML into privileged pages. This vulnerability requires that the user install a compromised Chrome extension, enabling the attacker to execute unauthorized code and manipulate the behavior of web pages. Proper safeguards must be maintained to mitigate the risks associated with such vulnerabilities, emphasizing the importance of securing browser environments against potentially harmful extensions.

References