CVE-2018-6179

Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced…

published January 9, 2019

CVSS
—
EPSS
1%
Percentile
67.4
In the wild
Unconfirmed
What it is

Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01178 · 67.4th percentile
Published
2019-01-09T19:00Z
EPSS history
Timeline
  • 09 JAN 19:00Z
    Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced…
    cvelistv5