CVE-2019-5838: Medium severity google chrome vulnerability
Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-5838?
CVE-2019-5838 is a vulnerability in Google Chrome that allows an attacker to bypass restrictions on file URIs via a malicious extension.
What software is affected by CVE-2019-5838?
Google Chrome versions prior to 75.0.3770.80, openSUSE Backports, openSUSE Leap versions 15.0, 15.1, and 42.3, Fedora versions 29 and 30, and Debian Linux version 10.0 are affected by CVE-2019-5838.
How severe is CVE-2019-5838?
CVE-2019-5838 has a severity rating of 4.3, which is considered medium.
How can I fix CVE-2019-5838 in Google Chrome?
Update Google Chrome to version 75.0.3770.80 or later to fix CVE-2019-5838.
Where can I find more information about CVE-2019-5838?
You can find more information about CVE-2019-5838 at the following references: [Debian Security Tracker](https://security-tracker.debian.org/tracker/CVE-2019-5838), [openSUSE Security Announcement](http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00085.html), [Google Chrome Blog](https://chromereleases.googleblog.com/2019/06/stable-channel-update-for-desktop.html).