CVE-2019-5768

Publication date

2019-02-19 17:00:00

Family

Chrome

State

PUBLISHED

Description

DevTools API not correctly gating on extension capability in DevTools in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.