CVE-2018-18342

Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to…

published December 11, 2018

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02653 · 85.5th percentile
Published
2018-12-11T15:00Z
EPSS history
Timeline
  • 11 DEC 15:00Z
    Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to…
    cvelistv5