CVE-2018-6033

Опубликовано: 24 янв. 2018

Источник: redhat

CVSS3: 8.8

EPSS Низкий

Описание

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

Ссылки на источники

Дополнительная информация

Статус:

Important

https://bugzilla.redhat.com/show_bug.cgi?id=1538505chromium-browser: race when opening downloaded files

EPSS

Процентиль: 81%

0.01563

Низкий

8.8 High

CVSS3

Связанные уязвимости

CVE-2018-6033

CVSS3: 8.8

ubuntu

больше 7 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVE-2018-6033

CVSS3: 8.8

nvd

больше 7 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

CVE-2018-6033

CVSS3: 8.8

debian

больше 7 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64 ...

GHSA-w9hm-gf9p-6w6p

CVSS3: 8.8

github

больше 3 лет назад

Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted Chrome Extension.

BDU:2018-01522

CVSS3: 8.8

fstec

около 8 лет назад

Уязвимость компонента Download File Handler браузера Google Chrome, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 81%

0.01563

Низкий

8.8 High

CVSS3