VDB
CVE-2018-18358
CVE-2018-18358
PUBLISHED
CVSS 5.699999809265137 MEDIUM
Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.
EPSS 0.44% · 36.1th percentile
Risk Scores
CVSS 3.0
5.699999809265137
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS Score
0.44%
36.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | chromium-browser | 59.0.3071.109-0ubuntu0.16.04.1291, 62.0.3202.89-0ubuntu0.16.04.1315, 63.0.3239.84-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | chromium-browser | 61.0.3163.100-0ubuntu1.1378, 62.0.3202.89-0ubuntu1.1386, 63.0.3239.84-0ubuntu1 |
Timeline
- Dec 5, 2018 CVE Published
- Sep 25, 2019 PoC Published
- Oct 9, 2020 PoC Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Dec 30, 2021 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2018-18358 third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-18358 third-party-advisory