CVE-2018-6076 PUBLISHED

Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.

EPSS 0.49% · 65.2th percentile

Risk Scores

EPSS Score
0.49%
65.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 64.0.3282.167-0ubuntu0.16.04.1, 64.0.3282.140-0ubuntu0.16.04.1
Ubuntu:16.04:LTSoxide-qt1.21.5-0ubuntu0.16.04.1, 0, 1.9.5-0ubuntu1
Ubuntu:14.04:LTSchromium-browser50.0.2661.102-0ubuntu0.14.04.1.1117, 49.0.2623.108-0ubuntu0.14.04.1.1113, 49.0.2623.87-0ubuntu0.14.04.1.1112

Timeline

References

Open in Interactive Console →