CyberRota Analysis
AI-GeneratedGoogle Chrome versions prior to 153.0.8010.36 are vulnerable due to insufficient policy enforcement in Extensions, allowing remote attackers to execute arbitrary code outside the sandbox by exploiting a compromised renderer process through social engineering techniques. This vulnerability poses a medium security risk, particularly for organizations that utilize Chrome in environments where extensions are heavily used. Users and administrators should prioritize updating to the latest version to mitigate potential exploitation risks.
Original NVD Description
Insufficient policy enforcement in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Related CVEs
Other vulnerabilities affecting the same vendor(s)