vulnerability
Google Chrome Vulnerability: CVE-2018-5179 Lack of limits on update() in ServiceWorker
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:P/I:N/A:N) | Apr 26, 2019 | Sep 9, 2022 | Sep 18, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
Apr 26, 2019
Added
Sep 9, 2022
Modified
Sep 18, 2025
Description
A service worker can send the activate event on itself periodically which allows it to run perpetually, allowing it to monitor activity by users. Affects all versions prior to Firefox 60.
Solution
google-chrome-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.