Google · Google Chrome · CVE-2018-6179
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 68.0.3440.75
**Description**
The issue is related to insufficient enforcement of file access permissions in Google Chrome, specifically in the activeTab case in Extensions. This could allow a remote attacker, who has convinced a user to install a malicious extension, to access local files via a crafted Chrome Extension.
**Recommendations**
For versions prior to 68.0.3440.75, update to version 68.0.3440.75 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to only trusted sources to minimize the risk of exploitation.