CVE-2018-17458

chromium-browser: An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a...

CVE-2018-17458 is fixed in 5 products on 1 platform, first by chromium-browser 70.0.3538.67-0ubuntu0.18.04.1, released April 26, 2019. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0222
82nd percentile

An improper update of the WebAssembly dispatch table in WebAssembly in Google Chrome prior to 69.0.3497.92 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Where it's fixed

ProductFixed inFixReleased
Linux
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 70.0.3538.67-0ubuntu0.18.04.1 chromium-browser 70.0.3538.67-0ubuntu0.18.04.1 Apr 26, 2019
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 70.0.3538.67-0ubuntu0.18.04.1 chromium-browser-l10n 70.0.3538.67-0ubuntu0.18.04.1 Apr 26, 2019
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 70.0.3538.67-0ubuntu0.18.04.1 chromium-chromedriver 70.0.3538.67-0ubuntu0.18.04.1 Apr 26, 2019
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 70.0.3538.67-0ubuntu0.18.04.1 chromium-codecs-ffmpeg 70.0.3538.67-0ubuntu0.18.04.1 Apr 26, 2019
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 70.0.3538.67-0ubuntu0.18.04.1 chromium-codecs-ffmpeg-extra 70.0.3538.67-0ubuntu0.18.04.1 Apr 26, 2019