CVE-2018-6089

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117 Opera (affected versions not specified)

Description The issue is related to a lack of CORS checks after a Service Worker redirects to a cross-origin PDF. This allows a remote attacker to leak limited cross-origin data via a crafted HTML page.

Recommendations For Google Chrome versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.