| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 87.0.4280.66 | 87.0.4280.66 |
Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free