Sploitus

CVE-2018-18356

No indexed exploits for CVE-2018-18356 yet

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products
Alt Linux, Centos, Google Chrome, Red Hat, Skia, Suse, Ubuntu
Google Chrome
< 71.0.3578.80
Fix
Available
CVSS 3.0
8.8 HIGH
EPSS
3.1% (87th percentile)
Weakness
CWE-416, CWE-787, CWE-190
NVD status
Modified
Published
2018-12-11
CVE-2018-18356 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2018-18356 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2018-18356 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.