Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
April

CVEs published in April 2018

1,684 vulnerabilities, 383 critical, 5 exploited.

Known exploitedIn KEVPublic exploitFix available

google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreMaking URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0...CVE-2018-6112Fix available4.3 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn object lifetime issue in the developer tools network handler in Google Chrome prior to 66.0...CVE-2018-6111Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreParsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6110Fix available5.4 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 morereadAsText() can indefinitely read the file picked by the user, rather than only once at the time...CVE-2018-6109Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6108Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6107Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreAn asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359...CVE-2018-6106Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 66.0.3359.117...CVE-2018-6105Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6104Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA stagnant permission prompt in Prompts in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6103Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreMissing confusable characters in Internationalization in Google Chrome prior to 66.0.3359.117...CVE-2018-6102Fix available4.3 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6101Fix available7.5 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome on macOS prior to...CVE-2018-6100Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of CORS checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6099Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of confusable characters in URL Formatter in Google Chrome prior to 66.0.3359...CVE-2018-6098Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of asynchronous methods in Fullscreen in Google Chrome on macOS prior to 66.0...CVE-2018-6097Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreA JavaScript focused window could overlap the fullscreen notification in Fullscreen in Google...CVE-2018-6096Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreInappropriate dismissal of file picker on keyboard events in Blink in Google Chrome prior to 66.0...CVE-2018-6095Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreInline metadata in GarbageCollection in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6094Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6093Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow on 32-bit systems in WebAssembly in Google Chrome prior to 66.0.3359.117...CVE-2018-6092Public exploitFix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreService Workers can intercept any request made by an <embed> or <object> tag in Fetch API in...CVE-2018-6091Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow that lead to a heap buffer-overflow in Skia in Google Chrome prior to 66.0...CVE-2018-6090Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA lack of CORS checks, after a Service Worker redirected to a cross-origin PDF, in Service Worker...CVE-2018-6089Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn iterator-invalidation bug in PDFium in Google Chrome prior to 66.0.3359.117 allowed a remote...CVE-2018-6088Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA use-after-free in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker...CVE-2018-6087Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk...CVE-2018-6086Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreRe-entry of a destructor in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed...CVE-2018-6085Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreFailure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome...CVE-2018-6083Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncluding port 22 in the list of allowed FTP ports in Networking in Google Chrome prior to 65.0...CVE-2018-6082Fix available4.7 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreXSS vulnerabilities in Interstitials in Google Chrome prior to 65.0.3325.146 allowed an attacker...CVE-2018-6081Fix available6.1 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed...CVE-2018-6080Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome...CVE-2018-6079Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146...CVE-2018-6078Fix available4.3 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreDisplacement map filters being applied to cross-origin images in Blink SVG rendering in Google...CVE-2018-6077Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreInsufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325...CVE-2018-6076Fix available6.1 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreIncorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325...CVE-2018-6075Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreFailure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a...CVE-2018-6074Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreA heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...CVE-2018-6073Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146...CVE-2018-6072Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreAn integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6071Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreLack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an...CVE-2018-6070Fix available6.1 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreStack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker...CVE-2018-6069Fix available6.5 MediumApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreObject lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a...CVE-2018-6068Fix available4.3 MediumApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote...CVE-2018-6067Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat linux desktop +2 more +4 moreLack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0...CVE-2018-6066Public exploitFix available6.5 MediumApril 28, 2018
google chrome, debian linux, google chromium v8 +4 more +6 moreInteger overflow in computing the required allocation size when instantiating a new javascript...CVE-2018-6065In KEVPublic exploitFix availableEPSS 60.3%8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0...CVE-2018-6064Public exploitFix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146...CVE-2018-6063Fix available8.8 HighApril 28, 2018
google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to...CVE-2018-6062Fix available8.8 HighApril 28, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open