CVE-2018-6091

Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to…

published January 9, 2019

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02139 · 81.8th percentile
Published
2019-01-09T19:00Z
EPSS history
Timeline
  • 09 JAN 19:00Z
    Service Workers can intercept any request made by an <embed> or <object> tag in Fetch API in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to…
    cvelistv5