Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-6140

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extens

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Chrome

Description

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Google Chrome

  • unspecified to < 67.0.3396.62affected

References