CVE-2018-6145 : What You Need to Know

Google Chrome prior to version 67.0.3396.62 is affected by an HTML parser vulnerability that allows remote attackers to bypass the same origin policy.

Understanding CVE-2018-6145

This CVE involves insufficient data validation in the HTML parser of Google Chrome, potentially enabling attackers to exploit the same origin policy.

What is CVE-2018-6145?

An HTML parser vulnerability in Google Chrome versions earlier than 67.0.3396.62 allowed attackers to bypass the same origin policy using a specially crafted HTML page.

The Impact of CVE-2018-6145

Attackers could exploit this vulnerability to bypass the same origin policy, potentially leading to unauthorized access to sensitive information.

Technical Details of CVE-2018-6145

This section provides technical insights into the vulnerability.

Vulnerability Description

Insufficient data validation in the HTML parser of Google Chrome before version 67.0.3396.62.

Affected Systems and Versions

Product: Chrome
Vendor: Google
Versions Affected: < 67.0.3396.62

Exploitation Mechanism

Attackers could create a malicious HTML page to exploit the vulnerability and bypass the same origin policy.

Mitigation and Prevention

Protecting systems from CVE-2018-6145 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Google Chrome to version 67.0.3396.62 or later to mitigate the vulnerability.
Avoid visiting untrusted websites or clicking on suspicious links.

Long-Term Security Practices

Regularly update browsers and software to the latest versions.
Implement strong security measures to prevent unauthorized access to sensitive data.

Patching and Updates

Google released a patch in version 67.0.3396.62 to address this vulnerability.