vulnerability
Google Chrome Vulnerability: CVE-2018-18358 Insufficient policy enforcement in Proxy
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:A/AC:M/Au:N/C:N/I:P/A:N) | Dec 11, 2018 | Jan 4, 2019 | Aug 12, 2025 |
Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:P/A:N)
Published
Dec 11, 2018
Added
Jan 4, 2019
Modified
Aug 12, 2025
Description
Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.
Solution
google-chrome-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.