CVE-2018-6106

An asynchronous generator may return an incorrect state in V8 in Google Chrome prior to 66.0.3359.117 allowing a remote attacker to potentially exploit object corruption via a crafted HTML page.

Affected products

Alt Linux, Google Chrome, Opera, Red Hat, Suse, V8

Google Chrome

< 66.0.3359.117

Fix

Available

CVSS 3.0

8.8 HIGH

EPSS

1.7% (76th percentile)

Weakness

CWE-19

NVD status

Modified

Published

2019-01-09