CVE-2018-11396

Name of the Vulnerable Software and Affected Versions GNOME Web (aka Epiphany) versions 3.28.2.1 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through JavaScript code that triggers access to a NULL URL. An example of such an exploit is a crafted window.open call.

Recommendations For GNOME Web (aka Epiphany) versions 3.28.2.1 and earlier, consider disabling JavaScript execution until a patch is available to prevent potential crashes caused by malicious JavaScript code.