Google Chrome V8 <70.0.3538.67代码执行漏洞

详细信息

漏洞类型

输入验证错误

漏洞描述

Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。V8是其中的一套开源JavaScript引擎。Google Chrome 70.0.3538.67之前版本中的V8存在安全漏洞。远程攻击者可借助特制的HTML页面利用该漏洞在沙盒内执行任意代码。

修复建议

从Google Chrome发布网站升级至Google Chrome的最新版本（70.0.3538.67或更高版本）： https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

参考链接

• https://www.debian.org/security/2018/dsa-4330

  NVD · vendor-advisory · x_refsource_DEBIAN

• https://access.redhat.com/errata/RHSA-2018:3004

  NVD · vendor-advisory · x_refsource_REDHAT

• https://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.html

  NVD · Exploit · Third Party Advisory · VDB Entry

• https://security.gentoo.org/glsa/201811-10

  NVD · vendor-advisory · x_refsource_GENTOO

• https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html

  NVD · x_refsource_CONFIRM

• https://crbug.com/888923

  NVD · x_refsource_MISC

• https://www.exploit-db.com/exploits/48184
• http://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.html

  NVD · x_refsource_MISC

• https://osv.dev/vulnerability/DSA-4330-1

  OSV

• https://ubuntu.com/security/CVE-2018-17463

  OSV

• https://www.cve.org/CVERecord?id=CVE-2018-17463

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2018-17463

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-17463

  NVD