CVE-2018-6093
chromium-browser: Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-o...
CVE-2018-6093 is fixed in 5 products on 1 platform, first by chromium-browser 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0160
75th percentile
Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser-l10n 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-chromedriver 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |