vulnerability

CentOS Linux: CVE-2019-5768: Critical: chromium-browser security update (CESA-2019:0309)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Feb 19, 2019
Added
Aug 28, 2019
Modified
May 25, 2023

Description

DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.

Solutions

centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.