{"id":"CVE-2024-6778","published":"2024-07-16T21:43:47Z","modified":"2024-08-01T21:45:37Z","title":"Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a…","vendor":"Google","product":"Chrome","tier":"tail","description":{"text":"Race in DevTools in Google Chrome prior to 126.0.6478.182 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)","provenance":"source","from":"CVE.org"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"CISA ADP Vulnrichment"},"epss":{"score":0.00788,"percentile":0.56065,"provenance":"source"},"cwes":[{"id":"CWE-362","name":"Concurrent Execution using Shared Resource with Improper Synchronization"},{"id":"CWE-366","name":"Race Condition within a Thread"}],"references":[{"url":"https://chromereleases.googleblog.com/2024/07/stable-channel-update-for-desktop.html","tags":[]},{"url":"https://issues.chromium.org/issues/341136300","tags":[]}],"priority":{"score":22.4,"factors":[{"name":"EPSS percentile","points":11.21},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":6.16}]},"exploitSources":{"pocGithub":{"count":2,"skipped":0,"earliest":"2024-09-10","earliestUrl":"https://github.com/ading2210/CVE-2024-6778-POC","repos":[{"name":"ading2210/CVE-2024-6778-POC","url":"https://github.com/ading2210/CVE-2024-6778-POC","stars":98,"created":"2024-09-10"},{"name":"r00tjunip3r1/POC-CVE-2024-6778","url":"https://github.com/r00tjunip3r1/POC-CVE-2024-6778","stars":6,"created":"2024-10-20"}]},"first":{"date":"2024-09-10","source":"PoC-in-GitHub","url":"https://github.com/ading2210/CVE-2024-6778-POC"},"provenance":"source"},"vendorSlug":"google","affectedVersions":[{"vendor":"Google","product":"Chrome","versions":[">= 126.0.6478.182, < 126.0.6478.182"]}],"euvd":{"id":"EUVD-2024-47810","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-google-chrome-cwe-362"}}