2018 CVE Vulnerabilities
17,817 CVEs published in 2018.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-6054 | — | — | 1.4% | Sep 25, 2018 | Use after free in WebUI in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap co... |
| CVE-2018-6053 | — | — | 0.8% | Sep 25, 2018 | Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view we... |
| CVE-2018-6052 | — | — | 1.3% | Sep 25, 2018 | Lack of support for a non standard no-referrer policy value in Blink in Google Chrome prior to 64.0.3282.119 allowed a r... |
| CVE-2018-6051 | — | — | 1.3% | Sep 25, 2018 | XSS Auditor in Google Chrome prior to 64.0.3282.119, did not ensure the reporting URL was in the same origin as the page... |
| CVE-2018-6050 | — | — | 1.3% | Sep 25, 2018 | Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents... |
| CVE-2018-6049 | — | — | 1.5% | Sep 25, 2018 | Incorrect security UI in permissions prompt in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof t... |
| CVE-2018-6048 | — | — | 1.3% | Sep 25, 2018 | Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6047 | — | — | 1.4% | Sep 25, 2018 | Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6046 | — | — | 1.2% | Sep 25, 2018 | Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6045 | — | — | 1.5% | Sep 25, 2018 | Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... |
| CVE-2018-6043 | — | — | 1.7% | Sep 25, 2018 | Insufficient data validation in External Protocol Handler in Google Chrome prior to 64.0.3282.119 allowed a remote attac... |
| CVE-2018-6042 | — | — | 1.2% | Sep 25, 2018 | Incorrect security UI in Omnibox in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the contents... |
| CVE-2018-6041 | — | — | 1.3% | Sep 25, 2018 | Incorrect security UI in navigation in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to spoof the conte... |
| CVE-2018-6040 | — | — | 1.4% | Sep 25, 2018 | Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6039 | — | — | 1.2% | Sep 25, 2018 | Insufficient data validation in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6038 | — | — | 1.5% | Sep 25, 2018 | Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bou... |
| CVE-2018-6037 | — | — | 1.6% | Sep 25, 2018 | Inappropriate implementation in autofill in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to obtain aut... |
| CVE-2018-6036 | — | — | 1.6% | Sep 25, 2018 | Insufficient data validation in V8 in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak... |
| CVE-2018-6035 | — | — | 1.5% | Sep 25, 2018 | Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potenti... |
| CVE-2018-6034 | — | — | 1.9% | Sep 25, 2018 | Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an ou... |
| CVE-2018-6033 | — | — | 1.5% | Sep 25, 2018 | Insufficient data validation in Downloads in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potential... |
| CVE-2018-6032 | — | — | 1.4% | Sep 25, 2018 | Insufficient policy enforcement in Blink in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentiall... |
| CVE-2018-6031 | — | — | 2.1% | Sep 25, 2018 | Use after free in PDFium in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially exploit heap c... |
| CVE-2018-15967 | — | — | 7.6% | Sep 25, 2018 | Adobe Flash Player versions 30.0.0.154 and earlier have a privilege escalation vulnerability. Successful exploitation co... |
| CVE-2018-15965 | CRITICAL | 9.8 | 25.9% | Sep 25, 2018 | Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have a dese... |
Check if your code is affected by 2018 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now