Non notée
CVE-2018-6051 XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page…
Description
XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page it was on, which allowed a remote attacker to obtain referrer details via a crafted HTML page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Chrome 64.0 | premières → < 64.0.3282.119 | 64.0.3282.119 |
Références
- chromereleases.googleblog.com chromereleases.googleblog.com
- DSA-4103 www.debian.org
- 102797 www.securityfocus.com
- 1040282 www.securitytracker.com
- crbug.com crbug.com
- RHSA-2018:0265 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Chrome
Les 6072 CVE de Chrome →
CVE-2026-120930
Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web…
5.4
Moyenne
CVE-2026-120931
Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to…
9.6
Critique
CVE-2026-121141
Improper input validation in Editing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social…
5.4
Moyenne
CVE-2026-121195
Incorrect authorization in TrustedTypes in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass…
8.8
Élevée