Your submission was sent successfully! Close

CVE-2018-16086

Published: 27 June 2019

Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.

Priority

Medium

CVSS 3 base score: 5.4

Status

Package Release Status
chromium-browser
Launchpad, Ubuntu, Debian
bionic
Released (69.0.3497.81-0ubuntu0.18.04.1)
cosmic
Released (69.0.3497.81-0ubuntu1)
precise Does not exist

trusty Does not exist
(trusty was ignored [no longer updated])
upstream
Released (69.0.3497.81)
xenial
Released (69.0.3497.81-0ubuntu0.16.04.1)
oxide-qt
Launchpad, Ubuntu, Debian
bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored [Ubuntu touch end-of-life])
upstream Needs triage

xenial Ignored
(Ubuntu touch end-of-life)