CVE-2024-5836
HIGHGoogle Chrome <126.0.6478.54 - RCE
Title source: llmDescription
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)
Exploits (2)
github
WORKING POC
97 stars
by ading2210 · javascriptpoc
https://github.com/ading2210/CVE-2024-6778-POC
nomisec
by yaghoubkhani · poc
https://github.com/yaghoubkhani/chrome_sandbox_scape_CVE-2024-5836_CVE-2024-6778
References (4)
Scores
CVSS v3
8.8
EPSS
0.0047
EPSS Percentile
64.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-474
Status
published
Products (3)
fedoraproject/fedora
39
fedoraproject/fedora
40
google/chrome
< 126.0.6478.54
Published
Jun 11, 2024
Tracked Since
Feb 18, 2026