Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension.
| Software | From | Fixed in |
|---|---|---|
| google / chrome | - | 87.0.4280.66 |