Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

93M4Qau783

#32956de 53,638
7.8CVSS total
Vulnerabilidades · 1
PT-2018-3273
7.8
2018-07-24
Google · Google Chrome · CVE-2018-6179
**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 68.0.3440.75 **Description** The issue is related to insufficient enforcement of file access permissions in Google Chrome, specifically in the activeTab case in Extensions. This could allow a remote attacker, who has convinced a user to install a malicious extension, to access local files via a crafted Chrome Extension. **Recommendations** For versions prior to 68.0.3440.75, update to version 68.0.3440.75 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to only trusted sources to minimize the risk of exploitation.