CVE-2018-6053: Leak of page thumbnails in New Tab Page

Published Aug 23, 2017
·
Updated

A leak of page thumbnails flaw was found in the New Tab Page component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=758169

External References:

https://chromereleases.googleblog.com/2018/01/stable-channel-update-for-desktop24.html

Other sources

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.

Credit

Asset Kabdenov

Affected Software

9 affected componentsFixes available
debian/chromium-browser
redhat/chromium-browser<64.0.3282.119
64.0.3282.119
Google Chrome<64.0.3282.119
64.0.3282.119
Google Chrome<64.0.3282.119
redhat Enterprise Linux Desktop=6.0
redhat Enterprise Linux Server=6.0
redhat Enterprise Linux Workstation=6.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0

Event History

Aug 23, 2017
CVE Published
12:00 AM
Sep 25, 2018
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2018-6053?

CVE-2018-6053 has been classified as a high-severity vulnerability due to the potential leak of sensitive information.

2

How do I fix CVE-2018-6053?

To fix CVE-2018-6053, update your browser to version 64.0.3282.119 or later.

3

Which browsers are affected by CVE-2018-6053?

CVE-2018-6053 affects Chromium-based browsers, including Google Chrome and the Debian version of the Chromium browser.

4

What does CVE-2018-6053 leak?

CVE-2018-6053 can lead to the unauthorized exposure of page thumbnails from the New Tab Page in the browser.

5

Is there a workaround for CVE-2018-6053 until I can update?

There is no specific workaround for CVE-2018-6053, so updating to the latest version is the recommended action.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203