Google Chrome DevTools Policy Bypass Vulnerability

A policy bypass vulnerability has been identified in the DevTools component of Google Chrome, affecting versions prior to 147.0.7727.55. This vulnerability allows an attacker to circumvent enterprise host restrictions on cookie modification by using a malicious Chrome extension. The issue arises from inadequate policy enforcement, which could be exploited by convincing a user to install the harmful extension.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of cookies, potentially allowing for session hijacking or other malicious activities that rely on cookie manipulation.

Remediation

Users can update to Google Chrome version 147.0.7727.55 or later to address this vulnerability.