VULNERABILITY INTELLIGENCE

CVE-2018-6169

CVSS score6.5 MEDIUM

EPSS probability1.35%

CISA KEVNot currently listed

Published2019-01-09

Last modified2026-06-17

Description

Lack of timeout on extension install prompt in Extensions in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to trigger installation of an unwanted extension via a crafted HTML page.