Google Chrome CVE-2019-5778 Cross Site Scripting Vulnerability

Description

A missing case for handling special schemes in permission request checks in Extensions in Google Chrome prior to 72.0.3626.81 allowed an attacker who convinced a user to install a malicious extension to bypass extension permission checks for privileged pages via a crafted Chrome Extension.

Affected Applications

Google Chrome

CVE References

Other References