Published: 04/12/2018 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 9.6 | Impact Score: 6 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome before 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0
debian debian linux 9.0

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2018-4117 AhsanEjaz discovered an information leak CVE-2018-6044 Rob Wu discovered a way to escalate privileges using extensions CVE-2018-6150 Rob Wu discovered an information disclosure issue (this problem was fixed in a previous release but was mistak ...

The implementation of the PagedownloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 6603359117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction ...

CWE-434 https://chromereleases.googleblog.com/2018/04/stable-channel-update-for-desktop.html https://crbug.com/805445 https://access.redhat.com/errata/RHSA-2018:2282 https://security.gentoo.org/glsa/201808-01 https://www.debian.org/security/2018/dsa-4256 http://www.securityfocus.com/bid/104887 https://access.redhat.com/errata/RHSA-2018:2282 https://nvd.nist.gov https://www.debian.org/security/./dsa-4256

CVE-2018-6152

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect