CVE-2018-6139 PUBLISHED

Insufficient target checks on the chrome.debugger API in DevTools in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension.

EPSS 0.76% · 73.2th percentile

Risk Scores

EPSS Score
0.76%
73.2th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:18.04:LTSchromium-browser64.0.3282.119-0ubuntu1, 61.0.3163.100-0ubuntu1.1378, 62.0.3202.62-0ubuntu0.17.10.1380
Ubuntu:16.04:LTSoxide-qt1.18.3-0ubuntu0.16.04.1, 1.18.5-0ubuntu0.16.04.1, 1.19.4-0ubuntu0.16.04.1

Timeline

References

Open in Interactive Console →