CVE-2019-5879
Insufficient policy enforcement in extensions in Google Chrome prior to 77.0.3865.75 allowed an attacker who convinced a user to install a malicious extension to read local files via a crafted Chrome Extension.
Date published : 2019-11-25
https://chromereleases.googleblog.com/2019/09/stable-channel-update-for-desktop.html