PT-2018-1736

CVE-2018-17462

Published

2018-09-25

Updated

2024-06-15

Description by

CVSS 2.0

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67

Description The issue is related to incorrect reference counting in the AppCache component of the Google Chrome web browser, which is associated with errors in access control for the isolated environment. Exploitation of this issue may allow a remote attacker to escape the sandbox and execute arbitrary code via a crafted HTML page.

Recommendations For Google Chrome versions prior to 70.0.3538.67, update to version 70.0.3538.67 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Ned Williamson

Niklas Baumstark

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-265