A precision error in Skia in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esr | Jan 9, 2019 | Jan 9, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jan 9, 2019 |
| Centos_linux | — | Upgrade firefoxUpgrade firefox-debuginfoUpgrade chromium-browserUpgrade chromium-browser-debuginfo | Jul 13, 2018 | May 29, 2018 |
| Debian | — | Upgrade firefox-esr | Jun 12, 2018 | May 29, 2018 |
| Freebsd | — | Upgrade chromium | May 31, 2018 | May 30, 2018 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Oct 3, 2018 | Oct 2, 2018 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Jan 17, 2019 | May 29, 2018 |
| Mfsa2018 14 | — | Upgrade to Mozilla Firefox ESR version 52.8.1Upgrade to Mozilla Firefox version 60.0.2Upgrade to Mozilla Firefox ESR version 60.0.2 | Jun 7, 2018 | Jun 6, 2018 |
| Oracle Solaris | — | Upgrade web/browser/firefox/plugin/firefox-java to version 52.9.0-0.175.3.34.0.4.0 on Solaris 11.3Upgrade web/browser/firefox to version 52.9.0-0.175.3.34.0.4.0 on Solaris 11.3Upgrade web/data/firefox-bookmarks to version 52.9.0-0.175.3.34.0.4.0 on Solaris 11.3 | Jul 18, 2018 | Jul 18, 2018 |
| Oracle_linux | — | Upgrade firefox | Jul 4, 2018 | May 29, 2018 |
| Redhat_linux | — | Upgrade firefoxUpgrade chromium-browser-debuginfoUpgrade firefox-debuginfoUpgrade chromium-browser | Jun 8, 2018 | May 29, 2018 |
| Suse | — | Upgrade libsoftokn3Upgrade chromiumUpgrade mozillafirefox-buildsymbolsUpgrade libsoftokn3-32bitUpgrade mozilla-nss-sysinitUpgrade mozillafirefox-branding-upstreamUpgrade chromedriverUpgrade mozillafirefox-translations-otherUpgrade mozillafirefox-develUpgrade mozilla-nss-certsUpgrade mozilla-nss-sysinit-32bitUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-translationsUpgrade mozilla-nss-develUpgrade mozillafirefoxUpgrade mozillafirefox-translations-commonUpgrade libfreebl3-32bitUpgrade libfreebl3Upgrade mozilla-nss-32bitUpgrade mozilla-nssUpgrade mozilla-nss-tools | Jun 10, 2018 | May 29, 2018 |
| Ubuntu | — | Upgrade firefox | Jun 20, 2018 | May 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub