Skip to content
8.8 High

CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far
Weakness CWE-787, CWE-190

Description

Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products and versions

Product Affected versions Fixed in
Chrome 65.0 earliest → < 65.0.3325.146 65.0.3325.146
The 6072 CVEs of Chrome →
Track this CVE