{"id": "KLA11598", "type": "kaspersky", "bulletinFamily": "info", "title": "KLA11598 Multiple vulnerabilities in Google Chrome", "description": "### *Detect date*:\n12/04/2018\n\n### *Severity*:\nHigh\n\n### *Description*:\nMultiple serious vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, spoof user interface.\n\n### *Affected products*:\nGoogle Chrome earlier then 70.0.3538.67\n\n### *Solution*:\nUpdate to the latest version \n[Google Chrome download page](<https://threats.kaspersky.com/en/product/Google-Chrome/>)\n\n### *Original advisories*:\n[Stable Channel Update for Desktop](<https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Google Chrome](<https://threats.kaspersky.com/en/product/Google-Chrome/>)\n\n### *CVE-IDS*:\n[CVE-2018-20070](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20070>)4.3Warning \n[CVE-2018-20065](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20065>)6.8High \n[CVE-2018-20068](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20068>)4.3Warning \n[CVE-2018-20069](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20069>)4.3Warning \n[CVE-2018-20071](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20071>)4.3Warning \n[CVE-2018-20067](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20067>)4.3Warning \n[CVE-2018-20066](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20066>)6.8High", "published": "2018-12-04T00:00:00", "modified": "2020-06-03T00:00:00", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cvss2": {"acInsufInfo": false, "cvssV2": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": true}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9}, "href": "https://threats.kaspersky.com/en/vulnerability/KLA11598/", "reporter": "Kaspersky Lab", "references": ["https://threats.kaspersky.com/en/product/Google-Chrome/", "https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html", "https://threats.kaspersky.com/en/product/Google-Chrome/", "https://threats.kaspersky.com/en/product/Google-Chrome-Enterprise/", "https://threats.kaspersky.com/en/product/Google-Chrome-Enterprise-for-current-user/", "https://threats.kaspersky.com/en/product/Google-Chrome-for-KIS/", "https://threats.kaspersky.com/en/product/Google-Chrome-for-current-user/", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20070", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20065", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20068", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20069", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20071", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20067", "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20066", "https://statistics.securelist.com/vulnerability-scan/month"], "cvelist": ["CVE-2018-20065", "CVE-2018-20066", "CVE-2018-20067", "CVE-2018-20068", "CVE-2018-20069", "CVE-2018-20070", "CVE-2018-20071"], "immutableFields": [], "lastseen": "2021-08-18T11:07:11", "viewCount": 1, "enchantments": {"dependencies": {"references": [{"type": "chrome", "idList": ["GCSA-7291058932546954654"]}, {"type": "cve", "idList": ["CVE-2018-20065", "CVE-2018-20066", "CVE-2018-20067", "CVE-2018-20068", "CVE-2018-20069", "CVE-2018-20070", "CVE-2018-20071"]}, {"type": "debiancve", "idList": ["DEBIANCVE:CVE-2018-20065", "DEBIANCVE:CVE-2018-20066", "DEBIANCVE:CVE-2018-20067", "DEBIANCVE:CVE-2018-20068", "DEBIANCVE:CVE-2018-20069", "DEBIANCVE:CVE-2018-20070", "DEBIANCVE:CVE-2018-20071"]}, {"type": "kaspersky", "idList": ["KLA11734"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2018-20065", "UB:CVE-2018-20066", "UB:CVE-2018-20067", "UB:CVE-2018-20068", "UB:CVE-2018-20069", "UB:CVE-2018-20070", "UB:CVE-2018-20071"]}], "rev": 4}, "score": {"value": 6.3, "vector": "NONE"}, "backreferences": {"references": [{"type": "chrome", "idList": ["GCSA-7291058932546954654"]}, {"type": "cve", "idList": ["CVE-2018-20065", "CVE-2018-20066", "CVE-2018-20067", "CVE-2018-20068", "CVE-2018-20069", "CVE-2018-20070", "CVE-2018-20071"]}, {"type": "debiancve", "idList": ["DEBIANCVE:CVE-2018-20065", "DEBIANCVE:CVE-2018-20066", "DEBIANCVE:CVE-2018-20067", "DEBIANCVE:CVE-2018-20068", "DEBIANCVE:CVE-2018-20069", "DEBIANCVE:CVE-2018-20070", "DEBIANCVE:CVE-2018-20071"]}, {"type": "kaspersky", "idList": ["KLA11734"]}, {"type": "ubuntucve", "idList": ["UB:CVE-2018-20065", "UB:CVE-2018-20066", "UB:CVE-2018-20067", "UB:CVE-2018-20068", "UB:CVE-2018-20069", "UB:CVE-2018-20070", "UB:CVE-2018-20071"]}]}, "exploitation": null, "vulnersScore": 6.3}, "_state": {"dependencies": 1647589307, "score": 0}}

{"ubuntucve": [{"lastseen": "2021-07-30T22:24:31", "description": "Failure to prevent navigation to top frame to data URLs in Navigation in\nGoogle Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to\nconfuse the user about the origin of the current page via a crafted HTML\npage.\n\n#### Notes\n\nAuthor| Note \n---|--- \n[danielwang](<https://launchpad.net/~danielwang>) | specific to iOS\n", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "baseScore": 4.3, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 1.4}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20069", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20069"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20069", "href": "https://ubuntu.com/security/CVE-2018-20069", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-07-30T22:24:35", "description": "Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80\nallowed a remote attacker to initiate potentially unsafe navigations\nwithout a user gesture via a crafted PDF file.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20065", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20065"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20065", "href": "https://ubuntu.com/security/CVE-2018-20065", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2021-07-30T22:24:32", "description": "Insufficiently strict origin checks during JIT payment app installation in\nPayments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker\nto install a service worker for a domain that can host attacker controled\nfiles via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "attackComplexity": "LOW", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "baseScore": 6.1, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 2.7}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20071", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20071"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20071", "href": "https://ubuntu.com/security/CVE-2018-20071", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-07-30T22:24:52", "description": "Incorrect handling of 304 status codes in Navigation in Google Chrome prior\nto 71.0.3578.80 allowed a remote attacker to confuse the user about the\norigin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "baseScore": 4.3, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 1.4}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20068", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20068"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20068", "href": "https://ubuntu.com/security/CVE-2018-20068", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-07-30T22:24:31", "description": "Incorrect handling of confusable characters in URL Formatter in Google\nChrome prior to 71.0.3578.80 allowed a remote attacker to spoof the\ncontents of the Omnibox (URL bar) via a crafted domain name.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "HIGH", "baseScore": 6.5, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 3.6}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20070", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20070"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20070", "href": "https://ubuntu.com/security/CVE-2018-20070", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-07-30T22:24:35", "description": "A renderer initiated back navigation was incorrectly allowed to cancel a\nbrowser initiated one in Navigation in Google Chrome prior to 71.0.3578.80\nallowed a remote attacker to confuse the user about the origin of the\ncurrent page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "baseScore": 4.3, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 1.4}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20067", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20067"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20067", "href": "https://ubuntu.com/security/CVE-2018-20067", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-07-30T22:24:35", "description": "Incorrect object lifecycle in Extensions in Google Chrome prior to\n71.0.3578.80 allowed a remote attacker to potentially exploit heap\ncorruption via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2019-01-09T00:00:00", "type": "ubuntucve", "title": "CVE-2018-20066", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20066"], "modified": "2019-01-09T00:00:00", "id": "UB:CVE-2018-20066", "href": "https://ubuntu.com/security/CVE-2018-20066", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "cve": [{"lastseen": "2022-03-23T15:37:03", "description": "Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20069", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20069"], "modified": "2020-08-24T17:37:00", "cpe": [], "id": "CVE-2018-20069", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20069", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": []}, {"lastseen": "2022-03-23T15:36:54", "description": "Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20065", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20065"], "modified": "2019-01-15T17:40:00", "cpe": [], "id": "CVE-2018-20065", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20065", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": []}, {"lastseen": "2022-03-23T15:37:10", "description": "Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "attackComplexity": "LOW", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 6.1, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 2.7}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20071", "cwe": ["CWE-79"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20071"], "modified": "2019-01-30T15:24:00", "cpe": [], "id": "CVE-2018-20071", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20071", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": []}, {"lastseen": "2022-03-23T15:37:07", "description": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20070", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20070"], "modified": "2019-01-16T14:43:00", "cpe": [], "id": "CVE-2018-20070", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20070", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": []}, {"lastseen": "2022-03-23T15:37:00", "description": "Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20068", "cwe": ["CWE-20"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20068"], "modified": "2019-01-16T14:24:00", "cpe": [], "id": "CVE-2018-20068", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20068", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": []}, {"lastseen": "2022-03-23T15:36:58", "description": "A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20067", "cwe": ["NVD-CWE-noinfo"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20067"], "modified": "2020-08-24T17:37:00", "cpe": [], "id": "CVE-2018-20067", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20067", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}, "cpe23": []}, {"lastseen": "2022-03-23T15:36:56", "description": "Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-01-09T19:29:00", "type": "cve", "title": "CVE-2018-20066", "cwe": ["CWE-416"], "bulletinFamily": "NVD", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20066"], "modified": "2019-01-15T13:02:00", "cpe": [], "id": "CVE-2018-20066", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-20066", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}, "cpe23": []}], "debiancve": [{"lastseen": "2022-05-14T23:37:54", "description": "Handling of URI action in PDFium in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to initiate potentially unsafe navigations without a user gesture via a crafted PDF file.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20065", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20065"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20065", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20065", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2022-05-14T23:37:54", "description": "Failure to prevent navigation to top frame to data URLs in Navigation in Google Chrome on iOS prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20069", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20069"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20069", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20069", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2021-12-14T17:47:16", "description": "Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "attackComplexity": "LOW", "scope": "CHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "baseScore": 6.1, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 2.7}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20071", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20071"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20071", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20071", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2022-05-14T23:37:54", "description": "Incorrect handling of 304 status codes in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20068", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20068"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20068", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20068", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2022-05-14T23:37:54", "description": "Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 6.5, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 3.6}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20070", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20070"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20070", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20070", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2022-05-14T23:37:54", "description": "A renderer initiated back navigation was incorrectly allowed to cancel a browser initiated one in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to confuse the user about the origin of the current page via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "baseScore": 4.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 1.4}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20067", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "NONE", "availabilityImpact": "NONE", "integrityImpact": "PARTIAL", "baseScore": 4.3, "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 2.9, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20067"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20067", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20067", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N"}}, {"lastseen": "2022-05-14T23:37:54", "description": "Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "baseScore": 8.8, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0", "userInteraction": "REQUIRED"}, "impactScore": 5.9}, "published": "2019-01-09T19:29:00", "type": "debiancve", "title": "CVE-2018-20066", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 6.4, "acInsufInfo": false, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-20066"], "modified": "2019-01-09T19:29:00", "id": "DEBIANCVE:CVE-2018-20066", "href": "https://security-tracker.debian.org/tracker/CVE-2018-20066", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "kaspersky": [{"lastseen": "2021-08-18T11:04:38", "description": "### *Detect date*:\n12/12/2018\n\n### *Severity*:\nWarning\n\n### *Description*:\nMultiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information.\n\n### *Exploitation*:\nMalware exists for this vulnerability. Usually such malware is classified as Exploit. [More details](<https://threats.kaspersky.com/en/class/Exploit/>).\n\n### *Affected products*:\nOpera earlier than 58.0.3135.26\n\n### *Solution*:\nUpdate to the latest version \n[Download Opera](<https://www.opera.com>)\n\n### *Original advisories*:\n[Changelog for Opera 58](<https://blogs.opera.com/desktop/changelog-for-58/#b3135.26>) \n[Stable Channel Update for Desktop](<https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html>) \n\n\n### *Impacts*:\nACE \n\n### *Related products*:\n[Opera](<https://threats.kaspersky.com/en/product/Opera/>)\n\n### *CVE-IDS*:\n[CVE-2018-17480](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17480>)6.8High \n[CVE-2018-17481](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17481>)6.8High \n[CVE-2018-18335](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18335>)6.8High \n[CVE-2018-18336](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18336>)6.8High \n[CVE-2018-18337](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18337>)6.8High \n[CVE-2018-18338](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18338>)6.8High \n[CVE-2018-18339](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18339>)6.8High \n[CVE-2018-18340](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18340>)6.8High \n[CVE-2018-18341](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18341>)6.8High \n[CVE-2018-18342](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18342>)6.8High \n[CVE-2018-18343](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18343>)6.8High \n[CVE-2018-18344](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18344>)4.3Warning \n[CVE-2018-18345](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18345>)4.3Warning \n[CVE-2018-18346](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18346>)4.3Warning \n[CVE-2018-18347](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18347>)6.8High \n[CVE-2018-18348](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18348>)4.3Warning \n[CVE-2018-18349](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18349>)4.3Warning \n[CVE-2018-18350](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18350>)4.3Warning \n[CVE-2018-18351](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18351>)4.3Warning \n[CVE-2018-18352](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18352>)4.3Warning \n[CVE-2018-18353](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18353>)4.3Warning \n[CVE-2018-18354](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18354>)6.8High \n[CVE-2018-18355](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18355>)4.3Warning \n[CVE-2018-18356](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18356>)6.8High \n[CVE-2018-18357](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18357>)4.3Warning \n[CVE-2018-18358](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18358>)2.9Warning \n[CVE-2018-18359](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18359>)6.8High \n[CVE-2018-20070](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20070>)4.3Warning \n[CVE-2018-20065](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20065>)6.8High \n[CVE-2018-20068](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20068>)4.3Warning \n[CVE-2018-20069](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20069>)4.3Warning \n[CVE-2018-20071](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20071>)4.3Warning \n[CVE-2018-20067](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20067>)4.3Warning \n[CVE-2018-20066](<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20066>)6.8High", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-12-12T00:00:00", "type": "kaspersky", "title": "KLA11734 Multiple vulnerabilities in Opera", "bulletinFamily": "info", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-17480", "CVE-2018-17481", "CVE-2018-18335", "CVE-2018-18336", "CVE-2018-18337", "CVE-2018-18338", "CVE-2018-18339", "CVE-2018-18340", "CVE-2018-18341", "CVE-2018-18342", "CVE-2018-18343", "CVE-2018-18344", "CVE-2018-18345", "CVE-2018-18346", "CVE-2018-18347", "CVE-2018-18348", "CVE-2018-18349", "CVE-2018-18350", "CVE-2018-18351", "CVE-2018-18352", "CVE-2018-18353", "CVE-2018-18354", "CVE-2018-18355", "CVE-2018-18356", "CVE-2018-18357", "CVE-2018-18358", "CVE-2018-18359", "CVE-2018-20065", "CVE-2018-20066", "CVE-2018-20067", "CVE-2018-20068", "CVE-2018-20069", "CVE-2018-20070", "CVE-2018-20071"], "modified": "2020-06-18T00:00:00", "id": "KLA11734", "href": "https://threats.kaspersky.com/en/vulnerability/KLA11734/", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}], "chrome": [{"lastseen": "2021-12-30T22:32:27", "description": "The Chrome team is delighted to announce the promotion of Chrome 71 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. \n\nChrome 71.0.3578.80 contains a number of fixes and improvements -- a list of changes is available in the[ log](<https://chromium.googlesource.com/chromium/src/+log/70.0.3538.110..71.0.3578.80?pretty=fuller&n=10000>). Watch out for upcoming[ Chrome](<https://chrome.blogspot.com/>) and[ Chromium](<https://blog.chromium.org/>) blog posts about new features and big efforts delivered in 71. \n\n\n\n\n\n\n\n\n**Security Fixes and Rewards** \n** \n** \n\n\nNote: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven&#x27;t yet fixed.\n\n** \n** \n\n\nThis update includes [43](<https://bugs.chromium.org/p/chromium/issues/list?can=1&q=type%3Abug-security+os%3DAndroid%2Cios%2Clinux%2Cmac%2Cwindows%2Call+label%3ARelease-0-M71>) security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the [Chrome Security Page](<https://sites.google.com/a/chromium.org/dev/Home/chromium-security>) for more information.\n\n** \n** \n\n\n[$N/A][[905940](<https://crbug.com/905940>)] High CVE-2018-17480: Out of bounds write in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 via Tianfu Cup on 2018-11-16\n\n[$6000][[901654](<https://crbug.com/901654>)] High CVE-2018-17481: Use after frees in PDFium. Reported by Anonymous on 2018-11-04\n\n[$5000][[895362](<https://crbug.com/895362>)] High CVE-2018-18335: Heap buffer overflow in Skia. Reported by Anonymous on 2018-10-15\n\n[$5000][[898531](<https://crbug.com/898531>)] High CVE-2018-18336: Use after free in PDFium. Reported by Huyna at Viettel Cyber Security on 2018-10-24\n\n[$3000][[886753](<https://crbug.com/886753>)] High CVE-2018-18337: Use after free in Blink. Reported by cloudfuzzer on 2018-09-19\n\n[$3000][[890576](<https://crbug.com/890576>)] High CVE-2018-18338: Heap buffer overflow in Canvas. Reported by Zhe Jin\uff08\u91d1\u54f2\uff09\uff0cLuyao Liu(\u5218\u8def\u9065) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-09-29\n\n[$3000][[891187](<https://crbug.com/891187>)] High CVE-2018-18339: Use after free in WebAudio. Reported by cloudfuzzer on 2018-10-02\n\n[$3000][[896736](<https://crbug.com/896736>)] High CVE-2018-18340: Use after free in MediaRecorder. Reported by Anonymous on 2018-10-18\n\n[$3000][[901030](<https://crbug.com/901030>)] High CVE-2018-18341: Heap buffer overflow in Blink. Reported by cloudfuzzer on 2018-11-01\n\n[$3000][[906313](<https://crbug.com/906313>)] High CVE-2018-18342: Out of bounds write in V8. Reported by Guang Gong of Alpha Team, Qihoo 360 on 2018-11-17\n\n[$1000][[882423](<https://crbug.com/882423>)] High CVE-2018-18343: Use after free in Skia. Reported by Tran Tien Hung (@hungtt28) of Viettel Cyber Security on 2018-09-10\n\n[$N/A][[866426](<https://crbug.com/866426>)] High CVE-2018-18344: Inappropriate implementation in Extensions. Reported by Jann Horn of Google Project Zero on 2018-07-23\n\n[$10337][[900910](<https://crbug.com/900910>)] High To be allocated: Multiple issues in SQLite via WebSQL. Reported by Wenxiang Qian of Tencent Blade Team on 2018-11-01\n\n[$8000][[886976](<https://crbug.com/886976>)] Medium CVE-2018-18345: Inappropriate implementation in Site Isolation. Reported by Masato Kinugawa and Jun Kokatsu (@shhnjk) on 2018-09-19\n\n[$2000][[606104](<https://crbug.com/606104>)] Medium CVE-2018-18346: Incorrect security UI in Blink. Reported by Luan Herrera (@lbherrera_) on 2016-04-23\n\n[$2000][[850824](<https://crbug.com/850824>)] Medium CVE-2018-18347: Inappropriate implementation in Navigation. Reported by Luan Herrera (@lbherrera_) on 2018-06-08\n\n[$2000][[881659](<https://crbug.com/881659>)] Medium CVE-2018-18348: Inappropriate implementation in Omnibox. Reported by Ahmed Elsobky (@0xsobky) on 2018-09-07\n\n[$2000][[894399](<https://crbug.com/894399>)] Medium CVE-2018-18349: Insufficient policy enforcement in Blink. Reported by David Erceg on 2018-10-11\n\n[$1000][[799747](<https://crbug.com/799747>)] Medium CVE-2018-18350: Insufficient policy enforcement in Blink. Reported by Jun Kokatsu (@shhnjk) on 2018-01-06\n\n[$1000][[833847](<https://crbug.com/833847>)] Medium CVE-2018-18351: Insufficient policy enforcement in Navigation. Reported by Jun Kokatsu (@shhnjk) on 2018-04-17\n\n[$1000][[849942](<https://crbug.com/849942>)] Medium CVE-2018-18352: Inappropriate implementation in Media. Reported by Jun Kokatsu (@shhnjk) on 2018-06-06\n\n[$1000][[884179](<https://crbug.com/884179>)] Medium CVE-2018-18353: Inappropriate implementation in Network Authentication. Reported by Wenxu Wu (@ma7h1as) of Tencent Security Xuanwu Lab on 2018-09-14\n\n[$1000][[889459](<https://crbug.com/889459>)] Medium CVE-2018-18354: Insufficient data validation in Shell Integration. Reported by Wenxu Wu (@ma7h1as) of Tencent Security Xuanwu Lab on 2018-09-26\n\n[$500][[896717](<https://crbug.com/896717>)] Medium CVE-2018-18355: Insufficient policy enforcement in URL Formatter. Reported by evi1m0 of Bilibili Security Team on 2018-10-18\n\n[$N/A][[883666](<https://crbug.com/883666>)] Medium CVE-2018-18356: Use after free in Skia. Reported by Tran Tien Hung (@hungtt28) of Viettel Cyber Security on 2018-09-13\n\n[$N/A][[895207](<https://crbug.com/895207>)] Medium CVE-2018-18357: Insufficient policy enforcement in URL Formatter. Reported by evi1m0 of Bilibili Security Team on 2018-10-15\n\n[$N/A][[899126](<https://crbug.com/899126>)] Medium CVE-2018-18358: Insufficient policy enforcement in Proxy. Reported by Jann Horn of Google Project Zero on 2018-10-26\n\n[$1000][[907714](<https://crbug.com/907714>)] Medium CVE-2018-18359: Out of bounds read in V8. Reported by cyrilliu of Tencent Zhanlu Lab on 2018-11-22\n\n[$500][[851821](<https://crbug.com/851821>)] Low CVE-2018-20065: Inappropriate implementation in PDFium. Reported by Salem Faisal Elmrayed on 2018-06-12\n\n[$500][[856135](<https://crbug.com/856135>)] Low CVE-2018-20066: Use after free in Extensions. Reported by Zhe Jin\uff08\u91d1\u54f2\uff09\uff0cLuyao Liu(\u5218\u8def\u9065) from Chengdu Security Response Center of Qihoo 360 Technology Co. Ltd on 2018-06-25\n\n[$500][[879965](<https://crbug.com/879965>)] Low CVE-2018-20067: Inappropriate implementation in Navigation. Reported by Luan Herrera (@lbherrera_) on 2018-09-03\n\n[$500][[882270](<https://crbug.com/882270>)] Low CVE-2018-20068: Inappropriate implementation in Navigation. Reported by Jesper van den Ende on 2018-09-09\n\n[$500][[890558](<https://crbug.com/890558>)] Low CVE-2018-20069: Insufficient policy enforcement in Navigation. Reported by Ryan Pickren (ryanpickren.com) on 2018-09-29\n\n[$N/A][[895885](<https://crbug.com/895885>)] Low CVE-2018-20070: Insufficient policy enforcement in URL Formatter. Reported by evi1m0 of Bilibili Security Team on 2018-10-16\n\n** \n** \n\n\nThis bug was fixed in Chrome 69, but was incorrectly omitted from the release notes at the time:\n\n** \n** \n\n\n[$3000][[853937](<https://crbug.com/853937>)] Medium CVE-2018-20071: Insufficient policy enforcement in Payments. Reported by Jun Kokatsu (@shhnjk) on 2018-06-18\n\n** \n** \n\n\nWe would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel. \n\n\n\nAs usual, our ongoing internal security work was responsible for a wide range of fixes: \n\n\n\n * [[911706](<https://crbug.com/911706>)] Various fixes from internal audits, fuzzing and other initiatives\n** \n** \n\n\nMany of our security bugs are detected using [AddressSanitizer](<https://code.google.com/p/address-sanitizer/wiki/AddressSanitizer>), [MemorySanitizer](<https://code.google.com/p/memory-sanitizer/wiki/MemorySanitizer>), [UndefinedBehaviorSanitizer](<https://www.chromium.org/developers/testing/undefinedbehaviorsanitizer>), [Control Flow Integrity](<https://sites.google.com/a/chromium.org/dev/developers/testing/control-flow-integrity>), [libFuzzer](<https://sites.google.com/a/chromium.org/dev/developers/testing/libfuzzer>), or [AFL](<http://lcamtuf.coredump.cx/afl/>).\n\n\n\n\n\n\n\n\nInterested in switching release channels? Find out how [here](<https://www.chromium.org/getting-involved/dev-channel>). If you find a new issue, please let us know by [filing a bug](<https://crbug.com/>). The [community help forum](<https://productforums.google.com/forum/#!forum/chrome>) is also a great place to reach out for help or learn about common issues.\n\n\n\n\n\nThank you,\n\n\n\n\n\n\n\nKrishna Govind", "cvss3": {"exploitabilityScore": 2.8, "cvssV3": {"baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "attackComplexity": "LOW", "scope": "UNCHANGED", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "integrityImpact": "HIGH", "baseScore": 8.8, "privilegesRequired": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "userInteraction": "REQUIRED", "version": "3.0"}, "impactScore": 5.9}, "published": "2018-12-04T00:00:00", "type": "chrome", "title": "Stable Channel Update for Desktop", "bulletinFamily": "software", "cvss2": {"severity": "MEDIUM", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "PARTIAL", "availabilityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "baseScore": 6.8, "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "acInsufInfo": false, "impactScore": 6.4, "obtainUserPrivilege": false}, "cvelist": ["CVE-2018-17480", "CVE-2018-17481", "CVE-2018-18335", "CVE-2018-18336", "CVE-2018-18337", "CVE-2018-18338", "CVE-2018-18339", "CVE-2018-18340", "CVE-2018-18341", "CVE-2018-18342", "CVE-2018-18343", "CVE-2018-18344", "CVE-2018-18345", "CVE-2018-18346", "CVE-2018-18347", "CVE-2018-18348", "CVE-2018-18349", "CVE-2018-18350", "CVE-2018-18351", "CVE-2018-18352", "CVE-2018-18353", "CVE-2018-18354", "CVE-2018-18355", "CVE-2018-18356", "CVE-2018-18357", "CVE-2018-18358", "CVE-2018-18359", "CVE-2018-20065", "CVE-2018-20066", "CVE-2018-20067", "CVE-2018-20068", "CVE-2018-20069", "CVE-2018-20070", "CVE-2018-20071"], "modified": "2018-12-04T00:00:00", "id": "GCSA-7291058932546954654", "href": "https://chromereleases.googleblog.com/2018/12/stable-channel-update-for-desktop.html", "cvss": {"score": 6.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P"}}]}