CVE-2018-17480
High · 8.8 CISA KEVCVSS
8.8
EPSS
35.6%
Published
Dec 11, 2018
CISA due date
Jun 22, 2022
The record
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | chromium | 0 | 71.0.3578.80-1 |
| Debian:12 | chromium | 0 | 71.0.3578.80-1 |
| Debian:13 | chromium | 0 | 71.0.3578.80-1 |
| Debian:9 | chromium-browser | 0 | 71.0.3578.80-1~deb9u1 |
| Red Hat:rhel_extras:6 | chromium-browser | 0 | 0:71.0.3578.80-1.el6_10 |
| Red Hat:rhel_extras:6 | chromium-browser-debuginfo | 0 | 0:71.0.3578.80-1.el6_10 |
| SUSE:Package Hub 12 SP2 | chromium | 0 | 71.0.3578.98-80.1 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 71.0.3578.80-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 71.0.3578.80-0ubuntu0.18.04.1 |
| openSUSE:Tumbleweed | chromium | 0 | 93.0.4577.82-1.1 |
| openSUSE:Tumbleweed | chromium | 0 | 113.0.5672.92-1.1 |
Related vulnerabilities
- CVE-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… Also affects chromium
- CVE-2025-7656 Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker… Also affects chromium
- CVE-2025-6554 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… Also affects chromium
- CVE-2025-6191 Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker… Also affects chromium
- CVE-2025-5959 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker… Also affects chromium
- CVE-2025-5419 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… Also affects chromium
- CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to… Also affects chromium
- CVE-2022-0303 security update Also affects chromium