Vulnerability CVE-2018-16075
Published: 2019-06-27

Description:
Insufficient file type enforcement in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to obtain local file data via a crafted HTML page.

Type:

CWE-254

 (Security Features)

CVSS2 => (AV:N/AC:H/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.6/10
2.9/10
4.9/10
Exploit range
Attack complexity
Authentication
Remote
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Google -> Chrome 

 References:
https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
https://crbug.com/788936
Copyright 2024, cxsecurity.com

 

Back to Top