vulnerability

FreeBSD: (Multiple Advisories) (CVE-2018-18356)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Feb 13, 2019

Added

Feb 13, 2019

Modified

Jun 15, 2026

Description

An integer overflow in path handling lead to a use after free in Skia in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Solutions

freebsd-upgrade-package-firefoxfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-chromium

References

CVE-2018-18356
https://attackerkb.com/topics/CVE-2018-18356
CWE-190
CWE-416
CWE-787
EUVD-EUVD-2018-10087
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10087

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report