9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.096 Low
EPSS
Percentile
94.7%
07/24/2018
Critical
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, write local files and obtain sensitive information. Below is a complete list of vulnerabilities:
Goggle Chrome versions earlier than 68
Update to the latest version. File with name old_chrome can be still detected after update. It caused by Google Chrome update policy which does not remove old versions when installing updates. Try to contact vendor for further delete instructions or ignore such kind of alerts at your own risk.
Google Chrome download page
Stable Channel Update for Desktop
ACE
CVE-2018-41174.3Warning
CVE-2018-61694.3Warning
CVE-2018-61706.8High
CVE-2018-61712.9Warning
CVE-2018-61724.3Warning
CVE-2018-61734.3Warning
CVE-2018-61746.8High
CVE-2018-61754.3Warning
CVE-2018-61764.6Warning
CVE-2018-61774.3Warning
CVE-2018-61784.3Warning
CVE-2018-61794.3Warning
CVE-2018-60445.0Warning
CVE-2018-61504.3Warning
CVE-2018-61516.8High
CVE-2018-61526.8High
CVE-2018-61536.8High
CVE-2018-61546.8High
CVE-2018-61554.3Warning
CVE-2018-61566.8High
CVE-2018-61576.8High
CVE-2018-61585.1High
CVE-2018-61594.3Warning
CVE-2018-61616.8High
CVE-2018-61626.8High
CVE-2018-61634.3Warning
CVE-2018-61644.3Warning
CVE-2018-61654.3Warning
CVE-2018-61664.3Warning
CVE-2018-61674.3Warning
CVE-2018-61684.3Warning
CVE-2018-61604.3Warning
CVE-2018-174604.3Warning
CVE-2018-174616.8High
chromereleases.googleblog.com/2018/07/stable-channel-update-for-desktop.html
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17460
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17461
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-4117
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6044
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6150
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6151
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6152
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6153
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6154
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6155
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6156
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6157
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6158
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6159
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6160
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6161
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6162
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6163
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6164
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6165
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6166
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6167
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6168
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6169
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6170
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6171
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6172
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6173
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6174
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6175
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6176
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6177
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6178
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6179
statistics.securelist.com/vulnerability-scan/month
threats.kaspersky.com/en/product/Google-Chrome/
www.google.com/chrome/browser/desktop/
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
8.3 High
AI Score
Confidence
High
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.096 Low
EPSS
Percentile
94.7%