Google · Google Chrome · CVE-2023-4078
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 115.0.5790.170
**Description**
The issue is related to an inappropriate implementation in the Extensions component of Google Chrome, which could allow an attacker to inject scripts or HTML into a privileged page via a crafted Chrome Extension. This could be achieved if the attacker convinces a user to install a malicious extension. The vulnerability is associated with incorrectly implemented security checks for standard elements, potentially enabling a remote attacker to conduct cross-site scripting attacks by loading a special extension.
**Recommendations**
For Google Chrome versions prior to 115.0.5790.170, update to version 115.0.5790.170 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to only trusted sources until the update is applied.