CVE-2018-6097
chromium-browser: Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a r...
CVE-2018-6097 is fixed in 5 products on 1 platform, first by chromium-browser 66.0.3359.139-0ubuntu0.18.04.3, released June 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0143
73rd percentile
Incorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0.3359.117 allowed a remote attacker to enter full screen without showing a warning via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-browser-l10n 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-chromedriver 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 66.0.3359.139-0ubuntu0.18.04.3 | chromium-codecs-ffmpeg-extra 66.0.3359.139-0ubuntu0.18.04.3 | Jun 27, 2019 |