CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 151.0.7922.72 are vulnerable due to insufficient policy enforcement in Extensions, allowing attackers to exploit this weakness by convincing users to install malicious extensions. This could lead to unauthorized access and manipulation of user data through crafted domain names. Organizations and users utilizing affected Chrome versions should prioritize updating to mitigate potential risks associated with this vulnerability.
Original NVD Description
Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted domain name. (Chromium security severity: Low)
Related CVEs
Other vulnerabilities affecting the same vendor(s)