description: Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.
problem types: Insufficient policy enforcement
affected:
{
product: Chrome
vendor: Google
versions:
lessThan: 67.0.3396.62, status: affected, version: unspecified, versionType: custom
}