← CVE Radar
CVE-2018-17463Google Chromium V8 Remote Code Execution Vulnerability
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
8.8 HIGHEPSS 84.56%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2018-17463
- Status
- Published
- Assigner (CNA)
- Chrome
- Published
- Nov 14, 2018
- Last modified
- 2025-10-21 23:45 UTC
Affected Products
As published by the CNA in the CVE record.
GoogleChrome1 version range
- before 70.0.3538.64
References
- debian.org https://www.debian.org/security/2018/dsa-4330
- crbug.com https://crbug.com/888923
- access.redhat.com https://access.redhat.com/errata/RHSA-2018:3004
- security.gentoo.org https://security.gentoo.org/glsa/201811-10
- chromereleases.googleblog.com https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
- securityfocus.com http://www.securityfocus.com/bid/105666
- packetstormsecurity.com http://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.html
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS