CVE-2018-6169

Removed by vendor...

chromium-browser: Permissions bypass in extension installation

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page...

CVE-2018-6169

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Chrome Web Store extension installation process is related to improper handling of the object’s existence time. Exploiting this vulnerability can allow a malicious actor to cause service failure the inability to use the resource after it is released or have other effects...