CVE-2026-19986

Name of the Vulnerable Software and Affected Versions Adblock for Youtube Extension versions prior to 7.2.2

Description An improper authorization issue exists in the Event Listener component within the contentscript.js file. The flaw occurs in the updateDynamicRules() function when the yt-anti-adblock-detected argument is manipulated, allowing a remote attacker to initiate an attack.

Recommendations As a temporary workaround, restrict the use of the updateDynamicRules() function in the contentscript.js file until a fix is provided. At the moment, there is no information about a newer version that contains a fix for this vulnerability.