2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6079 | — | — | 1.7% | Nov 14, 2018 | Inappropriate sharing of TEXTURE_2D_ARRAY/TEXTURE_3D data between tabs in WebGL in Google Chrome prior to 65.0.3325.146 ... |
| CVE-2018-6078 | — | — | 1.2% | Nov 14, 2018 | Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 65.0.3325.146 allowed a remote attacker... |
| CVE-2018-6077 | — | — | 1.5% | Nov 14, 2018 | Displacement map filters being applied to cross-origin images in Blink SVG rendering in Google Chrome prior to 65.0.3325... |
| CVE-2018-6076 | — | — | 1.2% | Nov 14, 2018 | Insufficient encoding of URL fragment identifiers in Blink in Google Chrome prior to 65.0.3325.146 allowed a remote atta... |
| CVE-2018-6075 | — | — | 1.5% | Nov 14, 2018 | Incorrect handling of specified filenames in file downloads in Google Chrome prior to 65.0.3325.146 allowed a remote att... |
| CVE-2018-6074 | — | — | 1.5% | Nov 14, 2018 | Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypas... |
| CVE-2018-6073 | — | — | 1.8% | Nov 14, 2018 | A heap buffer overflow in WebGL in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of b... |
| CVE-2018-6072 | — | — | 1.4% | Nov 14, 2018 | An integer overflow leading to use after free in PDFium in Google Chrome prior to 65.0.3325.146 allowed a remote attacke... |
| CVE-2018-6071 | — | — | 1.5% | Nov 14, 2018 | An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bound... |
| CVE-2018-6070 | — | — | 0.9% | Nov 14, 2018 | Lack of CSP enforcement on WebUI pages in Bink in Google Chrome prior to 65.0.3325.146 allowed an attacker who convinced... |
| CVE-2018-6069 | — | — | 1.6% | Nov 14, 2018 | Stack buffer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bou... |
| CVE-2018-6068 | — | — | 1.0% | Nov 14, 2018 | Object lifecycle issue in Chrome Custom Tab in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to spoof t... |
| CVE-2018-6067 | — | — | 1.5% | Nov 14, 2018 | Incorrect IPC serialization in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exp... |
| CVE-2018-6066 | — | — | 2.7% | Nov 14, 2018 | Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remot... |
| CVE-2018-6064 | — | — | 6.9% | Nov 14, 2018 | Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote ... |
| CVE-2018-6063 | — | — | 1.5% | Nov 14, 2018 | Incorrect use of mojo::WrapSharedMemoryHandle in Mojo in Google Chrome prior to 65.0.3325.146 allowed a remote attacker ... |
| CVE-2018-6062 | — | — | 1.6% | Nov 14, 2018 | Heap overflow write in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bound... |
| CVE-2018-6061 | — | — | 1.3% | Nov 14, 2018 | A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote att... |
| CVE-2018-6060 | — | — | 2.0% | Nov 14, 2018 | Use after free in WebAudio in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap... |
| CVE-2018-6057 | — | — | 1.5% | Nov 14, 2018 | Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compr... |
| CVE-2018-17477 | — | — | 1.2% | Nov 14, 2018 | Incorrect dialog placement in Extensions in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to spoof the c... |
| CVE-2018-17476 | — | — | 1.3% | Nov 14, 2018 | Incorrect dialog placement in Cast UI in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to obscure the fu... |
| CVE-2018-17475 | — | — | 1.2% | Nov 14, 2018 | Incorrect handling of history on iOS in Navigation in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to s... |
| CVE-2018-17474 | — | — | 1.4% | Nov 14, 2018 | Use after free in HTMLImportsController in Blink in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to pot... |
| CVE-2018-17473 | — | — | 1.1% | Nov 14, 2018 | Incorrect handling of confusable characters in Omnibox in Google Chrome prior to 70.0.3538.67 allowed a remote attacker ... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now