CVE-2018-6074 PUBLISHED

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

EPSS 0.55% · 67.7th percentile

Risk Scores

EPSS Score
0.55%
67.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 64.0.3282.167-0ubuntu0.16.04.1, 64.0.3282.140-0ubuntu0.16.04.1
Ubuntu:16.04:LTSoxide-qt1.21.5-0ubuntu0.16.04.1, 0, 1.9.5-0ubuntu1
Ubuntu:14.04:LTSchromium-browser50.0.2661.102-0ubuntu0.14.04.1.1117, 49.0.2623.108-0ubuntu0.14.04.1.1113, 49.0.2623.87-0ubuntu0.14.04.1.1112

Timeline

References

Open in Interactive Console →