Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-6136: Google Chrome before 67 can leak data via web page

CVE-2018-6136 · published 7 years ago

Summary

Google Chrome versions earlier than 67.0.3396.62 may let a specially crafted web page read data from memory it shouldn't. This could expose confidential information to an attacker. Update Chrome to the latest version to close the gap.

What to do

Update google chrome to version 67.0.3396.62 or later.

Affected software

Vendor	Product	Affected versions
google	chrome	< 67.0.3396.62 `cpe:2.3:a:google:chrome::::::::`

Original advisory text

Missing type check in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

6.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published27 Jun 2019

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2018-6136 · NVD

Track software like this

Free during beta