CVE-2018-6126

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...

8.8 HighPublic exploitFix available

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

7.67%Up 1.2 points since Apr 14, 2021

What each source reports

NVD Score used 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: CVE-2018-6126
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: CVE-2018-6126
Updated: 2026-11-02

EUVDEUVD-2018-17889 No score

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: EUVD-2018-17889
Updated: 2026-11-03

GitHub AdvisoriesGHSA-jhg2-2xh7-hgw9 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to...

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: GHSA-jhg2-2xh7-hgw9
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

OSVALPINE-CVE-2018-6126 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: ALPINE-CVE-2018-6126
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-03

OSV 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: CVE-2018-6126
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Show 17 moreShow less

OSVDEBIAN-CVE-2018-6126 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: DEBIAN-CVE-2018-6126
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:1815 8.8

Red Hat Security Advisory: chromium-browser security update

Record: RHSA-2018:1815
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:2112 9.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2018:2112
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2018:2113 9.8

Red Hat Security Advisory: firefox security update

Record: RHSA-2018:2113
CVSS 3.0: 9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-6126 8.8

A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: UBUNTU-CVE-2018-6126
CVSS 3.0: 8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2018-0268 No score

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 67.0.3396.62 fixes security issues:

Multiple flaws were found in the way Chromium 64.0.3282.140 processes various types of web content, where loading a web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose sensitive information. (CVE-2017-11215, CVE-2017-11225, CVE-2018-6056, CVE-2018-6057, CVE-2018-6060, CVE-2018-6061, CVE-2018-6062, CVE-2018-6063, CVE-2018-6064, CVE-2018-6065, CVE-2018-6066, CVE-2018-6067, CVE-2018-6068, CVE-2018-6069, CVE-2018-6070, CVE-2018-6071, CVE-2018-6072, CVE-2018-6073, CVE-2018-6074, CVE-2018-6075, CVE-2018-6076, CVE-2018-6077, CVE-2018-6078, CVE-2018-6079, CVE-2018-6080, CVE-2018-6081, CVE-2018-6082, CVE-2018-6083, CVE-2018-6084, CVE-2018-6085, CVE-2018-6086, CVE-2018-6087, CVE-2018-6088, CVE-2018-6089, CVE-2018-6090, CVE-2018-6091, CVE-2018-6092, CVE-2018-6093, CVE-2018-6094, CVE-2018-6095, CVE-2018-6096, CVE-2018-6097, CVE-2018-6098, CVE-2018-6099, CVE-2018-6100, CVE-2018-6101, CVE-2018-6102, CVE-2018-6103, CVE-2018-6104, CVE-2018-6105, CVE-2018-6106, CVE-2018-6107, CVE-2018-6108, CVE-2018-6109, CVE-2018-6110, CVE-2018-6111, CVE-2018-6112, CVE-2018-6113, CVE-2018-6114, CVE-2018-6115, CVE-2018-6116, CVE-2018-6117, CVE-2018-6118, CVE-2018-6120, CVE-2018-6121, CVE-2018-6122, CVE-2018-6123, CVE-2018-6124, CVE-2018-6126, CVE-2018-6127, CVE-2018-6128, CVE-2018-6129, CVE-2018-6130, CVE-2018-6131, CVE-2018-6132, CVE-2018-6133, CVE-2018-6134, CVE-2018-6135, CVE-2018-6136, CVE-2018-6137, CVE-2018-6138, CVE-2018-6139, CVE-2018-6140, CVE-2018-6141, CVE-2018-6142, CVE-2018-6143, CVE-2018-6144, CVE-2018-6145, CVE-2018-6147)

Record: MGASA-2018-0268
Updated: 2026-11-02

OSVMGASA-2018-0282 No score

Updated firefox packages fix security vulnerability

A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file with anti-aliasing turned off. This results in a potentially exploitable crash (CVE-2018-6126).

Record: MGASA-2018-0282
Updated: 2026-11-02

OSVMGASA-2018-0338 No score

Updated iceaepe packages fix security vulnerability

Updated iceape packages include security fixes from upstream Seamonkey and Firefox:

Multiple flaws were found in the way Iceape 2.49.1 processes various types of web content, where loading a web page containing malicious content could cause Iceape to crash, execute arbitrary code, or disclose sensitive information (CVE-2018-5089, CVE-2018-5091, CVE-2018-5095, CVE-2018-5096, CVE-2018-5097, CVE-2018-5098, CVE-2018-5099, CVE-2018-5102, CVE-2018-5103, CVE-2018-5104, CVE-2018-5117, CVE-2018-5125, CVE-2018-5127, CVE-2018-5129, CVE-2018-5130, CVE-2018-5131, CVE-2018-5144, CVE-2018-5145, CVE-2018-5148, CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178, CVE-2018-5183, CVE-2018-6126)

Record: MGASA-2018-0338
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10600-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10681-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12948-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:14572-1
Updated: 2026-11-02

OSVSUSE-SU-2018:1783-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issue:

CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).

Record: SUSE-SU-2018:1783-1
Updated: 2026-11-02

OSVSUSE-SU-2018:1783-2 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issue:

CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).

Record: SUSE-SU-2018:1783-2
Updated: 2026-11-02

OSVSUSE-SU-2018:1820-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issue:

CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).

Record: SUSE-SU-2018:1820-1
Updated: 2026-11-02

OSVSUSE-SU-2018:2298-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox to the 52.9 ESR release fixes the following issues:

These security issues were fixed:

Firefox ESR 52.9:
CVE-2018-5188 Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9 (bsc#1098998).
CVE-2018-12368 No warning when opening executable SettingContent-ms files (bsc#1098998).
CVE-2018-12366 Invalid data handling during QCMS transformations (bsc#1098998).
CVE-2018-12365 Compromised IPC child process can list local filenames (bsc#1098998).
CVE-2018-12364 CSRF attacks through 307 redirects and NPAPI plugins (bsc#1098998).
CVE-2018-12363 Use-after-free when appending DOM nodes (bsc#1098998).
CVE-2018-12362 Integer overflow in SSSE3 scaler (bsc#1098998).
CVE-2018-12360 Use-after-free when using focus() (bsc#1098998).
CVE-2018-5156 Media recorder segmentation fault when track type is changed during capture (bsc#1098998).
CVE-2018-12359 Buffer overflow using computed size of canvas element (bsc#1098998).
Firefox ESR 52.8:
CVE-2018-6126: Prevent heap buffer overflow in rasterizing paths in SVG with Skia (bsc#1096449).
CVE-2018-5183: Backport critical security fixes in Skia (bsc#1092548).
CVE-2018-5154: Use-after-free with SVG animations and clip paths (bsc#1092548).
CVE-2018-5155: Use-after-free with SVG animations and text paths (bsc#1092548).
CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files (bsc#1092548).
CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer (bsc#1092548).
CVE-2018-5159: Integer overflow and out-of-bounds write in Skia (bsc#1092548).
CVE-2018-5168: Lightweight themes can be installed without user interaction (bsc#1092548).
CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (bsc#1092548).
CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (bsc#1092548).

These non-security issues were fixed:

Various stability and regression fixes
Performance improvements to the Safe Browsing service to avoid slowdowns while updating site classification data

Record: SUSE-SU-2018:2298-1
Updated: 2026-11-02

OSVUSN-3682-1 No score

firefox vulnerability

A heap buffer overflow was discovered in Skia. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service, or execute arbitrary code.

Record: USN-3682-1
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`firefox-esr` Alpine:v3.7	before 52.8.1-r0	52.8.1-r0
`firefox-esr` Alpine:v3.8	before 52.8.1-r0	52.8.1-r0
`firefox-esr` Debian:12	before 52.8.1esr-1	52.8.1esr-1
`firefox-esr` Debian:13	before 52.8.1esr-1	52.8.1esr-1
`firefox-esr` Debian:14	before 52.8.1esr-1	52.8.1esr-1
`firefox-esr` Debian:8	before 52.8.1esr-1~deb8u1, plus listed versions 45.0.1esr-145.0.2esr-145.0esr-145.0esr-245.1.0esr-1 Show 45 moreShow less 45.1.1esr-145.2.0esr-145.2.0esr-1~deb7u145.2.0esr-1~deb8u145.3.0esr-145.3.0esr-1~deb7u145.3.0esr-1~deb8u145.3.0esr-245.4.0esr-145.4.0esr-1~deb7u145.4.0esr-1~deb7u245.4.0esr-1~deb8u145.4.0esr-1~deb8u245.4.0esr-245.5.0esr-145.5.0esr-1~deb8u145.5.1esr-145.5.1esr-1~deb7u145.5.1esr-1~deb8u145.6.0esr-145.6.0esr-1~deb7u145.6.0esr-1~deb8u145.7.0esr-145.7.0esr-1~deb7u145.7.0esr-1~deb8u145.7.0esr-245.7.0esr-345.7.0esr-445.8.0esr-145.8.0esr-1~deb7u145.8.0esr-1~deb8u145.9.0esr-145.9.0esr-1~deb7u145.9.0esr-1~deb8u152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-152.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u1	52.8.1esr-1~deb8u1
`firefox-esr` Debian:9	before 52.8.1esr-1~deb9u1, plus listed versions 45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1 Show 45 moreShow less 52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1	52.8.1esr-1~deb9u1
`chromium-browser` Debian:9 From an advisory covering 29 CVEs	before 67.0.3396.87-1~deb9u1, plus listed versions 59.0.3071.104-159.0.3071.86-160.0.3112.72-160.0.3112.78-160.0.3112.78-1~deb9u1 Show 36 moreShow less 61.0.3163.100-161.0.3163.100-1~deb9u161.0.3163.100-262.0.3202.75-162.0.3202.75-1~deb9u162.0.3202.89-162.0.3202.89-1~deb9u163.0.3239.30-163.0.3239.40-163.0.3239.84-163.0.3239.84-1~deb9u164.0.3282.119-164.0.3282.119-1~deb9u164.0.3282.119-265.0.3325.146-165.0.3325.146-265.0.3325.146-365.0.3325.146-465.0.3325.73-165.0.3325.74-166.0.3359.117-166.0.3359.117-1~deb9u166.0.3359.139-166.0.3359.181-166.0.3359.22-166.0.3359.22-266.0.3359.22-366.0.3359.26-166.0.3359.26-267.0.3396.48-167.0.3396.56-167.0.3396.57-167.0.3396.62-167.0.3396.62-267.0.3396.79-167.0.3396.79-2	67.0.3396.87-1~deb9u1
`chromium-browser-stable` Mageia:6 From an advisory covering 89 CVEs	before 67.0.3396.62-1.mga6	67.0.3396.62-1.mga6
`firefox` Mageia:6	before 52.8.1-1.mga6	52.8.1-1.mga6

Show 50 moreShow less

Affected packages
Package	Affected	Fixed
`firefox-l10n` Mageia:6	before 52.8.1-1.mga6	52.8.1-1.mga6
`iceape` Mageia:6 From an advisory covering 29 CVEs	before 2.49.3-1.mga6	2.49.3-1.mga6
`chromium-browser` Red Hat:rhel_extras:6 From an advisory covering 23 CVEs	before 0:67.0.3396.62-2.el6_9	0:67.0.3396.62-2.el6_9
`chromium-browser-debuginfo` Red Hat:rhel_extras:6 From an advisory covering 23 CVEs	before 0:67.0.3396.62-2.el6_9	0:67.0.3396.62-2.el6_9
`firefox` Red Hat:enterprise_linux:6::client From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox-debuginfo` Red Hat:enterprise_linux:6::client From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox` Red Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox-debuginfo` Red Hat:enterprise_linux:6::computenode From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox` Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox-debuginfo` Red Hat:enterprise_linux:6::server From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox` Red Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox-debuginfo` Red Hat:enterprise_linux:6::workstation From an advisory covering 11 CVEs	before 0:60.1.0-5.el6	0:60.1.0-5.el6
`firefox` Red Hat:enterprise_linux:7::client From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`firefox-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`firefox` Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`firefox-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`firefox` Red Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`firefox-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 11 CVEs	before 0:60.1.0-4.el7_5	0:60.1.0-4.el7_5
`MozillaFirefox` SUSE:OpenStack Cloud 7	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Desktop 12 SP3	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 12 SP1	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 12 SP2	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Software Development Kit 12 SP3	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12-LTSS	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP1-LTSS	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP2-LTSS	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP3	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 12 SP3	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Enterprise Storage 4	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Server 12 SP2-BCL	before 52.8.1esr-109.34.1	52.8.1esr-109.34.1
`MozillaFirefox` SUSE:Linux Enterprise Software Development Kit 11 SP4	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Point of Sale 11 SP3	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Server 11 SP3-LTSS	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Server 11 SP3-TERADATA	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Server 11 SP4	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Server for SAP Applications 11 SP4	before 52.8.1esr-72.35.1	52.8.1esr-72.35.1
`MozillaFirefox` SUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 20 CVEs	before 52.9.0esr-3.7.12	52.9.0esr-3.7.12
`firefox` Ubuntu:14.04:LTS	before 60.0.2+build1-0ubuntu0.14.04.1, plus listed versions 24.0+build1-0ubuntu125.0+build3-0ubuntu0.13.10.128.0~b2+build1-0ubuntu228.0+build1-0ubuntu128.0+build2-0ubuntu1 Show 45 moreShow less 28.0+build2-0ubuntu229.0+build1-0ubuntu0.14.04.230.0+build1-0ubuntu0.14.04.331.0+build1-0ubuntu0.14.04.132.0+build1-0ubuntu0.14.04.132.0.3+build1-0ubuntu0.14.04.133.0+build2-0ubuntu0.14.04.134.0+build2-0ubuntu0.14.04.135.0+build3-0ubuntu0.14.04.235.0.1+build1-0ubuntu0.14.04.136.0+build2-0ubuntu0.14.04.436.0.1+build2-0ubuntu0.14.04.136.0.4+build1-0ubuntu0.14.04.137.0+build2-0ubuntu0.14.04.137.0.1+build1-0ubuntu0.14.04.137.0.2+build1-0ubuntu0.14.04.138.0+build3-0ubuntu0.14.04.139.0+build5-0ubuntu0.14.04.139.0.3+build2-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.140.0+build4-0ubuntu0.14.04.440.0.3+build1-0ubuntu0.14.04.141.0+build3-0ubuntu0.14.04.141.0.1+build2-0ubuntu0.14.04.141.0.2+build2-0ubuntu0.14.04.142.0+build2-0ubuntu0.14.04.143.0+build1-0ubuntu0.14.04.143.0.4+build3-0ubuntu0.14.04.144.0+build3-0ubuntu0.14.04.144.0.1+build2-0ubuntu0.14.04.144.0.2+build1-0ubuntu0.14.04.145.0+build2-0ubuntu0.14.04.145.0.1+build1-0ubuntu0.14.04.245.0.2+build1-0ubuntu0.14.04.146.0+build5-0ubuntu0.14.04.246.0.1+build1-0ubuntu0.14.04.347.0+build3-0ubuntu0.14.04.148.0+build2-0ubuntu0.14.04.149.0+build4-0ubuntu0.14.04.149.0.2+build2-0ubuntu0.14.04.150.0+build2-0ubuntu0.14.04.250.0.2+build1-0ubuntu0.14.04.150.1.0+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.151.0.1+build2-0ubuntu0.14.04.2	60.0.2+build1-0ubuntu0.14.04.1
`thunderbird` Ubuntu:14.04:LTS	before 1:60.2.1+build1-0ubuntu0.14.04.2, plus listed versions 1:24.0+build1-0ubuntu11:24.0+build1-0ubuntu21:24.1.1+build1-0ubuntu0.13.10.11:24.1.1+build1-0ubuntu11:24.2.0+build1-0ubuntu1 Show 35 moreShow less 1:24.4.0+build1-0ubuntu11:24.5.0+build1-0ubuntu0.14.04.11:24.6.0+build1-0ubuntu0.14.04.11:31.0+build1-0ubuntu0.14.04.11:31.1.1+build1-0ubuntu0.14.04.11:31.1.2+build1-0ubuntu0.14.04.11:31.2.0+build2-0ubuntu0.14.04.11:31.3.0+build1-0ubuntu0.14.04.11:31.4.0+build1-0ubuntu0.14.04.11:31.5.0+build1-0ubuntu0.14.04.11:31.6.0+build1-0ubuntu0.14.04.11:31.7.0+build1-0ubuntu0.14.04.11:31.8.0+build1-0ubuntu0.14.04.11:38.2.0+build1-0ubuntu0.14.04.11:38.3.0+build1-0ubuntu0.14.04.11:38.4.0+build3-0ubuntu0.14.04.11:38.5.1+build2-0ubuntu0.14.04.11:38.6.0+build1-0ubuntu0.14.04.11:38.7.2+build1-0ubuntu0.14.04.11:38.8.0+build1-0ubuntu0.14.04.11:45.2.0+build1-0ubuntu0.14.04.31:45.3.0+build1-0ubuntu0.14.04.41:45.4.0+build1-0ubuntu0.14.04.11:45.5.1+build1-0ubuntu0.14.04.11:45.7.0+build1-0ubuntu0.14.04.11:45.8.0+build1-0ubuntu0.14.04.11:52.1.1+build1-0ubuntu0.14.04.11:52.2.1+build1-0ubuntu0.14.04.11:52.3.0+build1-0ubuntu0.14.04.11:52.4.0+build1-0ubuntu0.14.04.21:52.5.0+build1-0ubuntu0.14.04.11:52.6.0+build1-0ubuntu0.14.04.11:52.7.0+build1-0ubuntu0.14.04.11:52.8.0+build1-0ubuntu0.14.04.11:52.9.1+build3-0ubuntu0.14.04.1	1:60.2.1+build1-0ubuntu0.14.04.2
`chromium-browser` Ubuntu:16.04:LTS	before 67.0.3396.99-0ubuntu0.16.04.2, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 31 moreShow less 49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.1	67.0.3396.99-0ubuntu0.16.04.2
`firefox` Ubuntu:16.04:LTS	before 60.0.2+build1-0ubuntu0.16.04.1, plus listed versions 41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1 Show 39 moreShow less 45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.1	60.0.2+build1-0ubuntu0.16.04.1
`thunderbird` Ubuntu:16.04:LTS	before 1:60.2.1+build1-0ubuntu0.16.04.4, plus listed versions 1:38.3.0+build1-0ubuntu21:38.5.1+build2-0ubuntu11:38.6.0+build1-0ubuntu11:38.7.2+build1-0ubuntu0.16.04.11:38.8.0+build1-0ubuntu0.16.04.1 Show 15 moreShow less 1:45.2.0+build1-0ubuntu0.16.04.11:45.3.0+build1-0ubuntu0.16.04.21:45.4.0+build1-0ubuntu0.16.04.11:45.5.1+build1-0ubuntu0.16.04.11:45.7.0+build1-0ubuntu0.16.04.11:45.8.0+build1-0ubuntu0.16.04.11:52.1.1+build1-0ubuntu0.16.04.11:52.2.1+build1-0ubuntu0.16.04.11:52.3.0+build1-0ubuntu0.16.04.11:52.4.0+build1-0ubuntu0.16.04.21:52.5.0+build1-0ubuntu0.16.04.11:52.6.0+build1-0ubuntu0.16.04.11:52.7.0+build1-0ubuntu0.16.04.11:52.8.0+build1-0ubuntu0.16.04.11:52.9.1+build3-0ubuntu0.16.04.1	1:60.2.1+build1-0ubuntu0.16.04.4
`oxide-qt` Ubuntu:16.04:LTS	All versions, plus listed versions 1.9.5-0ubuntu11.10.3-0ubuntu0.15.10.11.10.3-0ubuntu0.15.10.21.11.3-0ubuntu31.11.4-0ubuntu1 Show 17 moreShow less 1.11.5-0ubuntu11.12.5-0ubuntu11.12.6-0ubuntu11.12.7-0ubuntu11.13.6-0ubuntu11.14.7-0ubuntu11.14.9-0ubuntu0.16.04.11.15.7-0ubuntu0.16.04.11.15.8-0ubuntu0.16.04.11.16.5-0ubuntu0.16.04.11.17.7-0ubuntu0.16.04.11.17.9-0ubuntu0.16.04.11.18.3-0ubuntu0.16.04.11.18.5-0ubuntu0.16.04.11.19.4-0ubuntu0.16.04.11.20.4-0ubuntu0.16.04.11.21.5-0ubuntu0.16.04.1	None known
`chromium-browser` Ubuntu:18.04:LTS	before 67.0.3396.99-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 8 moreShow less 63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.1	67.0.3396.99-0ubuntu0.18.04.1
`firefox` Ubuntu:18.04:LTS	before 60.0.2+build1-0ubuntu0.18.04.1, plus listed versions 56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu160.0.1+build2-0ubuntu0.18.04.1	60.0.2+build1-0ubuntu0.18.04.1
`thunderbird` Ubuntu:18.04:LTS	before 1:60.2.1+build1-0ubuntu0.18.04.2, plus listed versions 1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1	1:60.2.1+build1-0ubuntu0.18.04.2
`MozillaFirefox` openSUSE:Tumbleweed From an advisory covering 661 CVEs	before 92.0-1.2	92.0-1.2
`chromium` openSUSE:Tumbleweed From an advisory covering 1081 CVEs	before 93.0.4577.82-1.1	93.0.4577.82-1.1
`chromium` openSUSE:Tumbleweed From an advisory covering 2310 CVEs	before 113.0.5672.92-1.1	113.0.5672.92-1.1
`firefox-esr` openSUSE:Tumbleweed From an advisory covering 1860 CVEs	before 128.5.1-1.1	128.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Skia - Heap Overflow in SkScan::FillPath due to Precision Error	2018-07-27

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-6126 is a high vulnerability (CVSS 8.8) in Google Chrome, published May 30, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.67%, the 94th percentile. Fixed in firefox-esr 52.8.1-r0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 74 versions and 4,140 references. The JSON record has them.