description: Omission of the .desktop filetype from the Safe Browsing checklist in SafeBrowsing in Google Chrome on Linux prior to 72.0.3626.81 allowed an attacker who convinced a user to download a .desktop file to execute arbitrary code via a downloaded .desktop file.
problem types: Insufficient validation of untrusted input
affected:
{
product: Chrome
vendor: Google
versions:
lessThan: 72.0.3626.81, status: affected, version: unspecified, versionType: custom
}