CVE-2018-6137

CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page

published January 9, 2019

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01902 · 79.5th percentile
Published
2019-01-09T19:00Z
EPSS history
Timeline
  • 09 JAN 19:00Z
    CSS Paint API in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to leak cross-origin data via a crafted HTML page
    cvelistv5