Security Advisory
CVE-2018-18352
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page.