0.004 Low
EPSS
Percentile
73.7%
Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform a DOM based XSS attack via a crafted HTML page.
bugzilla.redhat.com/show_bug.cgi?id=1552493
chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html