CVE-2017-15413

chromium-browser: Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially e...

CVE-2017-15413 is fixed in 5 products on 1 platform, first by chromium-browser 63.0.3239.84-0ubuntu1, released August 28, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0166
76th percentile

Type confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Where it's fixed

ProductFixed inFixReleased
Linux
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 63.0.3239.84-0ubuntu1 chromium-browser 63.0.3239.84-0ubuntu1 Aug 28, 2018
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 63.0.3239.84-0ubuntu1 chromium-browser-l10n 63.0.3239.84-0ubuntu1 Aug 28, 2018
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 63.0.3239.84-0ubuntu1 chromium-chromedriver 63.0.3239.84-0ubuntu1 Aug 28, 2018
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 63.0.3239.84-0ubuntu1 chromium-codecs-ffmpeg 63.0.3239.84-0ubuntu1 Aug 28, 2018
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 63.0.3239.84-0ubuntu1 chromium-codecs-ffmpeg-extra 63.0.3239.84-0ubuntu1 Aug 28, 2018