PT-2018-17367

CVE-2018-6097

·

Published

2018-04-17

·

Updated

2024-06-15

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 66.0.3359.117
Description The issue concerns incorrect handling of asynchronous methods in Fullscreen mode, allowing a remote attacker to enter full screen without displaying a warning via a crafted HTML page. This can lead to spoofing the fullscreen UI, potentially deceiving users.
Recommendations For Google Chrome versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-19
Related identifiers
CVE-2018-6097
ALT-PU-2018-1639
DSA-4182-1
MGASA-2018-0268
OPENSUSE-SU-2018_1042-1
OPENSUSE-SU-2018:1175-1
OPENSUSE-SU-2018:1437-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2018:1195
RHSA-2018_1195
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com