Security Advisory
CVE-2018-18344
6.5
MEDIUM
Vulnerability Description
Inappropriate allowance of the setDownloadBehavior devtools protocol feature in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker with control of an installed extension to access files on the local file system via a crafted Chrome Extension.
Published Date
December 11, 2018
Official Source
NIST NVD Advisory