CVE-2024-5836

Description

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

Reserved 2024-06-11 | Published 2024-06-11 | Updated 2025-03-14 | Assigner Chrome

Problem types

Inappropriate implementation

Product status

126.0.6478.54 before 126.0.6478.54
affected

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

issues.chromium.org/issues/341875171

lists.fedoraproject.org/...7VXA32LXMNK3DSK3JBRLTBPFUH7LTODU/

lists.fedoraproject.org/...MPU7AB53QQVNTBPGRMJRY5SXJNYWW3FX/

cve.org (CVE-2024-5836)

nvd.nist.gov (CVE-2024-5836)

Download JSON