CVE-2026-8888 in Chrome Extension
要約
〜によって MITRE • 2026年06月03日
Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without complexity validation. An on-path attacker can inject specific patterns to cause catastrophic backtracking, resulting in denial of service on all browsing.
If you want to get best quality of vulnerability data, you may have to visit VulDB.