Google Chrome DevTools Discretionary Access Control Bypass Vulnerability

A vulnerability in the DevTools component of Google Chrome has been identified, allowing remote attackers to bypass discretionary access controls. This issue affects Chrome versions prior to 136.0.7103.59. The vulnerability arises from an inappropriate implementation that enables attackers to manipulate users into performing specific UI gestures while interacting with a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access or manipulation of resources, bypassing intended access controls.

Remediation

Users can update to Google Chrome version 136.0.7103.59 or later to address this vulnerability.