CVE-2018-6061: Race Condition
A race condition flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=794091
External References:
https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html
Other sources
A race in the handling of SharedArrayBuffers in WebAssembly in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6061?
CVE-2018-6061 is classified as a high-severity vulnerability due to the potential for a race condition in the V8 component of the Chromium browser.
How do I fix CVE-2018-6061?
To fix CVE-2018-6061, update your Chromium browser to version 65.0.3325.146 or later.
What systems are affected by CVE-2018-6061?
CVE-2018-6061 affects Chromium browser versions lower than 65.0.3325.146 and specific Linux distributions such as Red Hat Enterprise Linux and Debian.
What is the impact of CVE-2018-6061?
The impact of CVE-2018-6061 can allow an attacker to exploit the race condition, which may lead to arbitrary code execution.
Is there a workaround for CVE-2018-6061?
There are no known workarounds for CVE-2018-6061; updating to a fixed version is the recommended course of action.