chromium -- multiple vulnerabilitiesentered 2018-07-27
no CVE referenced
CVE details
CVE-2018-6152
The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction.
- Score
- 9.6 critical
- Published
- 2018-12-04
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.