CVE-2024-10229

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.69 Microsoft Edge (affected versions not specified)

Description: The issue is related to an inappropriate implementation in Extensions, allowing a remote attacker to bypass site isolation via a crafted Chrome Extension. This could potentially allow an attacker to bypass security restrictions. An exploit for this issue is available, with a proof-of-concept demonstrating the bypass of site isolation. The exploit involves a web service worker intercepting a request and responding with arbitrary content.

Recommendations: For Google Chrome versions prior to 130.0.6723.69, update to version 130.0.6723.69 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of extensions to minimize the risk of exploitation.