CVE-2018-6037
chromium-browser: Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain...
CVE-2018-6037 is fixed in 5 products on 1 platform, first by chromium-browser 64.0.3282.119-0ubuntu1, released September 25, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0160
75th percentile
Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain autofill data with insufficient user gestures via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser-l10n 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-chromedriver 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg-extra 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |