Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds