CVE-2018-20066: Use After Free
Published Jan 9, 2019
·Updated
Incorrect object lifecycle in Extensions in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
1 affected component
Google Chrome<71.0.3578.80
Event History
Jan 9, 2019
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-20066?
CVE-2018-20066 has a medium severity rating due to its potential for exploitation through heap corruption.
2
How do I fix CVE-2018-20066?
To fix CVE-2018-20066, upgrade Google Chrome to version 71.0.3578.80 or later.
3
What versions of Google Chrome are affected by CVE-2018-20066?
CVE-2018-20066 affects Google Chrome versions prior to 71.0.3578.80.
4
Who can exploit CVE-2018-20066?
A remote attacker could exploit CVE-2018-20066 by using a crafted HTML page to cause heap corruption.
5
What type of attack does CVE-2018-20066 involve?
CVE-2018-20066 involves a potential heap corruption attack through vulnerabilities in the object lifecycle of extensions.