CVE-2018-6039
chromium-browser: Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti...
CVE-2018-6039 is fixed in 5 products on 1 platform, first by chromium-browser 64.0.3282.119-0ubuntu1, released September 25, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0118
67th percentile
Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user cross-origin data via a crafted Chrome Extension.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser-l10n 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-chromedriver 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg-extra 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |