Home

CVE-2018-17466

Description

Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.106

Associated Vulnerability

VulnerabilityOS Platform
Google Chrome (70.0.3538.67)Windows
Google Chrome (x64) (70.0.3538.67)Windows
Multiple vulnerabilities are fixed in Update for Google Chrome For Mac (70.0.3538.67)Mac
firefox-esr security update(DSA-4354-1) firefox-esr_60.4.0esr-1~deb9u1_i386.debLinux
firefox-esr security update(DSA-4354-1) firefox-esr_60.4.0esr-1~deb9u1_amd64.debLinux
(RHSA-2018:3831) firefox security update firefox-60.4.0-1.el6.i686.rpmLinux
(RHSA-2018:3831) firefox security update firefox-60.4.0-1.el6.x86_64.rpmLinux
(RHSA-2018:3833) firefox security update firefox-60.4.0-1.el7.i686.rpmLinux
(RHSA-2018:3833) firefox security update firefox-60.4.0-1.el7.x86_64.rpmLinux
(RHSA-2019:0159) thunderbird security update thunderbird-60.4.0-1.el6.i686.rpmLinux
(RHSA-2019:0159) thunderbird security update thunderbird-60.4.0-1.el6.x86_64.rpmLinux
(RHSA-2019:0160) thunderbird security update thunderbird-60.4.0-1.el7_6.x86_64.rpmLinux
Google Chrome (70.0.3538.67) (For Debian)Linux
Google Chrome (70.0.3538.67) (For Centos)Linux
Google Chrome (70.0.3538.67) (For RedHat)Linux
Google Chrome (70.0.3538.67) (For Suse)Linux
Google Chrome (70.0.3538.67) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-308242Google Chrome (70.0.3538.67)
PATCH-308251Google Chrome (x64) (70.0.3538.67)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234