CVE-2018-16066

Description

A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.413

Associated Vulnerability

VulnerabilityOS Platform
Google Chrome (69.0.3497.81)Windows
Google Chrome (x64) (69.0.3497.81)Windows
chromium-browser security update(DSA-4289-1) chromium_69.0.3497.81-1~deb9u1_i386.debLinux
chromium-browser security update(DSA-4289-1) chromium_69.0.3497.81-1~deb9u1_amd64.debLinux
(RHSA-2018:2666) chromium-browser security update chromium-browser-69.0.3497.81-1.el6_10.i686.rpmLinux
(RHSA-2018:2666) chromium-browser security update chromium-browser-69.0.3497.81-1.el6_10.x86_64.rpmLinux
Google Chrome (69.0.3497.81) (For Debian)Linux
Google Chrome (69.0.3497.81) (For Centos)Linux
Google Chrome (69.0.3497.81) (For RedHat)Linux
Google Chrome (69.0.3497.81) (For Suse)Linux
Google Chrome (69.0.3497.81) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-308005Google Chrome (69.0.3497.81)
PATCH-308006Google Chrome (x64) (69.0.3497.81)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234