CVE-2018-16064 on Ubuntu 16.04 LTS (xenial) - low.
Description:
Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.