Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2018-6152
HistoryDec 04, 2018 - 5:29 p.m.

CVE-2018-6152

2018-12-0417:29:00
Debian Security Bug Tracker
security-tracker.debian.org
9

0.013 Low

EPSS

Percentile

85.7%

The implementation of the Page.downloadBehavior backend unconditionally marked downloaded files as safe, regardless of file type in Google Chrome prior to 66.0.3359.117 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page and user interaction.

OSVersionArchitecturePackageVersionFilename
Debian9allchromium-browser< 70.0.3538.110-1~deb9u1chromium-browser_70.0.3538.110-1~deb9u1_all.deb