description: Allowing the chrome.debugger API to run on file:// URLs in DevTools in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system without file access permission via a crafted Chrome Extension.
problem types: Insufficient policy enforcement
affected:
{
product: Chrome
vendor: Google
versions:
lessThan: 69.0.3497.81, status: affected, version: unspecified, versionType: custom
}