CVE-2026-18018

Опубликовано: 30 июл. 2026

Источник: nvd

CVSS3: 4

EPSS Низкий

Описание

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

Ссылки

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html
Release Notes
Vendor Advisory
https://issues.chromium.org/issues/524467747
Permissions Required

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 151.0.7922.72 (исключая)

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00083

Низкий

4 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVE-2026-18018

CVSS3: 4

ubuntu

11 дней назад

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

CVE-2026-18018

CVSS3: 2.8

redhat

11 дней назад

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

CVE-2026-18018

msrc

10 дней назад

Chromium: CVE-2026-18018 Inappropriate implementation in Updater

CVE-2026-18018

CVSS3: 4

debian

11 дней назад

Inappropriate implementation in Updater in Google Chrome on Windows pr ...

GHSA-fm8q-cqfv-58rj

CVSS3: 4

github

11 дней назад

Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

EPSS

Процентиль: 0%

0.00083

Низкий

4 Medium

CVSS3

Дефекты

CWE-451