CVE-2019-13705
Insufficient policy enforcement in extensions in Google Chrome prior to 78.0.3904.70 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension.
Date published : 2019-11-25
https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html