Related Vulnerabilities: CVE-2018-6099  

A Cross Origin Resource Sharing bypass has been found in the Service Worker component of the Chromium browser before 66.0.3359.117.

Severity Medium

Remote Yes

Type Access restriction bypass

Description

A Cross Origin Resource Sharing bypass has been found in the Service Worker component of the Chromium browser before 66.0.3359.117.

AVG-678 chromium 65.0.3325.181-7 66.0.3359.117-1 Critical Fixed

https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html
https://crbug.com/808825