Google Chrome Extensions Policy Bypass Vulnerability Allowing Cross-Origin Data Leakage

A policy bypass vulnerability has been identified in the Extensions component of Google Chrome, affecting versions prior to 142.0.7444.59. This vulnerability allows an attacker to leak cross-origin data by convincing a user to install a malicious extension.

Impact

Exploitation of this vulnerability could lead to unauthorized access to cross-origin data, potentially allowing attackers to gather sensitive information from other domains.

Remediation

Users can update to Google Chrome version 142.0.7444.59 or later to address this vulnerability.