CVE-2019-5778

CVE-2019-5778 is a medium-severity vulnerability in Google Chrome versions prior to 72.0.3626.81, affecting products like Debian, Fedora, and Red Hat. It allowed a malicious Chrome Extension to bypass permission checks for privileged pages by exploiting a missing case in handling special schemes during permission requests. An attacker could achieve this by convincing a user to install the crafted extension, leading to high integrity impact without requiring user interaction beyond the initial installation. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has received some community discussion and media coverage.