CVE-2018-6140

HIGH · CVSS 8.8 EPSS 2.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-01-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2018-6140

Severity

HIGH

CVSS

8.8

EPSS

2.64%

Chrome

Original NVD Description

Allowing the chrome.debugger API to attach to Web UI pages in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.