CVE-2018-6118

2019-06-2716:13:42

Chrome

www.cve.org

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.8%

JSON

A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page.

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "66.0.3359.139",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]