This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home
/chromium-security/security-faq

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS

The Vulnerability that I discovered recently in the chrome is that WE CAN WATCH THE YOUTUBE RESTRICTED VIDEOS WITHOUT SIGN IN TO YOUTUBE WHERE YOUTUBE ASK TO SIGN IN TO CONFIRM YOUR AGE.
This can be done by – 
1.	Installing “Tampermonkey” Extension from the “Chrome Web Store”.
2.	Now Install “SaveFrom.net Helper” User.JS from ”savefrom.net/userjs-setup.php”(Install this script).
3.	After this simply refresh the browser.
4.	You can see there is a download tab below every YouTube Video.
5.	You will find the same tab when you land on a “YouTube Restricted Video”
6.	Hence the Users can Download and Watch something which is According to your policies shouldn’t be Viewed by anonymous user.


VERSION
Chrome Version: [56.0.2924.87] + [stable]
Operating System: [Windows 10 Home Single Language 64 bit, 10.0, Build 14393]

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

 

Deleted: This template is ONLY for reporting security bugs.docx 6.3 MB

This template is ONLY for reporting security bugs.docx 6.3 MB Download