> CVE-2026-8879

« BACK_TO_HOME
PUBLISHED
2026-06-03 19:16
MODIFIED
2026-06-03 19:16
EPSS (Prob. Exploit)
0.37%
Top 68.7%
DATA SOURCES:
NVD 🔗 2026-06-03 FIRST EPSS 🔗 2026-11-01

> DESCRIPTION

Version 3.0.7 of the Securly Chrome Extension dynamically registers content13.min.js as a content script via chrome.scripting.registerContentScripts() at runtime. This script is NOT declared in manifest.json and bypasses Chrome Web Store static security review. It runs on all URLs and immediately hides all page content, creates a full-page overlay, pauses all videos, and only restores content when the service worker confirms the page passes filtering. If Securly's servers are unreachable, pages remain indefinitely hidden.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/06/2026 19:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://kb.cert.org/vuls/id/595768
« BACK_TO_HOME