CVE-2018-6151 PUBLISHED

Bad cast in DevTools in Google Chrome on Win, Linux, Mac, Chrome OS prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted Chrome Extension.

EPSS 0.64% · 70.3th percentile

Risk Scores

EPSS Score
0.64%
70.3th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSchromium-browser67.0.3396.99-0ubuntu0.18.04.1, 66.0.3359.181-0ubuntu0.18.04.1, 66.0.3359.139-0ubuntu0.18.04.3
Ubuntu:16.04:LTSchromium-browser57.0.2987.98-0ubuntu0.16.04.1276, 58.0.3029.81-0ubuntu0.16.04.1277, 58.0.3029.96-0ubuntu0.16.04.1279
Ubuntu:16.04:LTSoxide-qt1.16.5-0ubuntu0.16.04.1, 1.17.7-0ubuntu0.16.04.1, 1.17.9-0ubuntu0.16.04.1

Timeline

References

Open in Interactive Console →