CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension…

published June 27, 2019

CVSS
—
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00492 · 41.4th percentile
Published
2019-06-27T16:13Z
EPSS history
Timeline
  • 27 JUN 16:13Z
    Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension…
    cvelistv5