CVE-2024-5836

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.54

Description The issue is related to an inappropriate implementation in DevTools, which can be exploited by an attacker to execute arbitrary code via a crafted Chrome Extension. This can happen if a user is convinced to install a malicious extension. The estimated impact and real-world incidents are not specified.

Recommendations For versions prior to 126.0.6478.54, update to version 126.0.6478.54 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation. Avoid using untrusted or unknown extensions until the issue is resolved.