description: Google Chrome prior to 56.0.2924.76 for Windows insufficiently sanitized DevTools URLs, which allowed a remote attacker who convinced a user to install a malicious extension to read filesystem contents via a crafted HTML page.
problem types: insufficient validation of untrusted input
affected:
{
product: Google Chrome prior to 56.0.2924.76 for Windows
vendor: n/a
versions:
status: affected, version: Google Chrome prior to 56.0.2924.76 for Windows
}