Security Advisory

CVE-2018-18345

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-12-11 15:00:00
Last updated 2024-08-05 11:08:21
Assigner Chrome
CVSS score not scored
State PUBLISHED

Description

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.