CVE-2019-5768 describes a vulnerability in Google Chrome versions prior to 72.0.3626.81, specifically within the DevTools API, which failed to properly gate extension capabilities. This flaw allowed a malicious Chrome extension, if installed by a user, to read local files on the system. With a CVSS score of 6.5 (Medium), this vulnerability requires user interaction (UI:R) to install a malicious extension, but once installed, it could lead to high confidentiality impact (C:H) by allowing unauthorized access to local files. There is no evidence of active exploitation (KEV: No), and no public exploit code (Metasploit, Nuclei, ExploitDB: None) is available, with minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 72.0.3626.81CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.