CVE-2018-20073

Use of extended attributes in downloads in Google Chrome prior to 72.0.3626.81 allowed a local attacker to read download URLs via the filesystem.

Score

CVSS 3.0 5.5 Medium

Status

Modified - chrome-cve-admin@google.com

Published

2019-06-27

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Chrome (Google)

References

• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00057.html
• https://chromereleases.googleblog.com/2019/01/stable-channel-update-for-desktop.html
• https://crbug.com/733943