vulnerability

CentOS Linux: CVE-2018-6179: Important: chromium-browser security update (CESA-2018:2282)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Jan 9, 2019
Added
Aug 28, 2019
Modified
May 25, 2023

Description

Insufficient enforcement of file access permission in the activeTab case in Extensions in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.

Solutions

centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfo
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.