CVE-2018-18355
chromium-browser: Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote...
CVE-2018-18355 is fixed in 5 products on 1 platform, first by chromium-browser 71.0.3578.80-0ubuntu0.18.04.1, released December 11, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0115
66th percentile
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 71.0.3578.80-0ubuntu0.18.04.1 | chromium-browser 71.0.3578.80-0ubuntu0.18.04.1 | Dec 11, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 71.0.3578.80-0ubuntu0.18.04.1 | chromium-browser-l10n 71.0.3578.80-0ubuntu0.18.04.1 | Dec 11, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 71.0.3578.80-0ubuntu0.18.04.1 | chromium-chromedriver 71.0.3578.80-0ubuntu0.18.04.1 | Dec 11, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 71.0.3578.80-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg 71.0.3578.80-0ubuntu0.18.04.1 | Dec 11, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 71.0.3578.80-0ubuntu0.18.04.1 | chromium-codecs-ffmpeg-extra 71.0.3578.80-0ubuntu0.18.04.1 | Dec 11, 2018 |