The vulnerability arises from the Securly Chrome Extension dynamically registering content13.min.js as a content script at runtime via chrome.scripting.registerContentScripts(), without declaring it in the manifest.json. This circumvents Chrome Web Store's static security review process. The script executes on all web pages, immediately hiding page content, overlaying the page, and pausing videos until a service worker verifies the page against filtering criteria. If the service worker cannot reach Securly's servers, the page content remains hidden indefinitely, effectively causing a denial of service. This behavior is classified under CWE-829, indicating inclusion of functionality from an untrusted control sphere.

Users of the affected Securly Chrome Extension version may experience indefinite page content hiding and video pausing if the extension cannot communicate with Securly's servers. This results in a denial of service condition where legitimate web content is inaccessible. There is no indication of code execution or data leakage from the provided information. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or uninstalling the affected Securly Chrome Extension version to avoid potential denial of service. Monitor the CERT advisory at https://kb.cert.org/vuls/id/595768 for updates. No vendor advisory or official fix is currently available.