CVE-2018-18349

Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user…

published December 11, 2018

CVSS
—
EPSS
1%
Percentile
61.8
In the wild
Unconfirmed
What it is

Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user to install a malicious extension to access files on the local file system via a crafted Chrome Extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.8th percentile
Published
2018-12-11T15:00Z
EPSS history
Timeline
  • 11 DEC 15:00Z
    Remote frame navigations was incorrectly permitted to local resources in Blink in Google Chrome prior to 71.0.3578.80 allowed an attacker who convinced a user…
    cvelistv5