CVE-2018-17480 PUBLISHED KEV

Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

EPSS 26.96% · 96.3th percentile

Risk Scores

EPSS Score
26.96%
96.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSchromium-browser0, 61.0.3163.100-0ubuntu1.1378, 62.0.3202.62-0ubuntu0.17.10.1380
Ubuntu:16.04:LTSchromium-browser62.0.3202.62-0ubuntu0.16.04.1308, 62.0.3202.75-0ubuntu0.16.04.1313, 63.0.3239.84-0ubuntu0.16.04.1

Timeline

References

Open in Interactive Console →