vulnerability

CentOS Linux: CVE-2018-6169: Important: chromium-browser security update (CESA-2018:2282)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jan 9, 2019
Added
Aug 28, 2019
Modified
May 25, 2023

Description

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.

Solution(s)

centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.