CVE-2019-5879

CVE-2019-5879 describes an insufficient policy enforcement vulnerability in Google Chrome prior to version 77.0.3865.75. An attacker could exploit this by convincing a user to install a malicious Chrome extension, allowing the extension to read local files via a crafted request. This medium-severity vulnerability (CVSS 6.5) requires user interaction (UI:R) and network access (AV:N) but has low attack complexity (AC:L), potentially leading to high confidentiality impact (C:H) by exposing local files. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting a low current threat landscape.