The vulnerability in Securly Chrome Extension version 3.0.7 involves dynamic runtime registration of a content script not declared in the extension manifest, circumventing static security review by the Chrome Web Store. This script executes on all web pages, immediately hiding content and pausing media playback until verification from Securly's service worker. If the service worker cannot be reached, the extension indefinitely blocks page content, resulting in availability disruption. This behavior is categorized under CWE-829, indicating inclusion of functionality from an untrusted control sphere. No official remediation or patch information is provided in the vendor advisory.

The vulnerability causes a high-severity availability impact by potentially blocking access to all web page content indefinitely if the Securly service worker is unreachable. There is no reported confidentiality or integrity impact. The extension's behavior could disrupt user browsing and productivity due to persistent content hiding and media pausing.

Patch status is not yet confirmed — check the vendor advisory at https://kb.cert.org/vuls/id/595768 for current remediation guidance. Until an official fix is available, users should consider disabling or uninstalling the affected extension version 3.0.7 to avoid indefinite page blocking. No vendor advisory indicates that the issue is already mitigated or requires no action.