CVE-2018-17463highunder attack

CVE-2018-17463: high-severity vulnerability in Google Chrome

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.8epss 85%
from disclosure to weapon481 days
Published on NVDNov 14
1st PoC+481d
metasploitSep 25
CISA KEV+1302d
exploitation probability
85%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
6 public exploit(s)
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
3 products (12 components)
Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

A flaw in Chrome's V8 JavaScript engine incorrectly marked certain operations as safe, allowing attackers to run malicious code within the browser's sandbox through a specially crafted webpage.

Technical detail

CVE-2018-17463 involves improper side effect annotation in V8 that permits escape from sandbox constraints; a remote attacker can craft HTML to trigger unsafe code execution with full process privileges via this annotation bypass.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Google · Chrome
public PoCs found — 6✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/48184githubgithub.com/jhalon/CVE-2018-17463★ 10githubgithub.com/kdmarti2/CVE-2018-17463★ 1cve_referencepacketstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.htmlunverifiedvulncheckvulncheck.com/xdb/0b8ebcbe653dunverifiedvulncheckvulncheck.com/xdb/d8e2ff9c09baunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Google Chrome

In the same product, most dangerous first.

CVE-2023-4863HIGHCVE-2023-4863EPSS 100.0%KEVCVE-2021-21224HIGHCVE-2021-21224EPSS 84.2%KEVCVE-2020-6418HIGHCVE-2020-6418EPSS 78.8%KEVCVE-2022-2294HIGHCVE-2022-2294EPSS 70.5%KEVCVE-2021-21220HIGHCVE-2021-21220EPSS 70.4%KEVCVE-2021-30551HIGHCVE-2021-30551EPSS 64.7%KEV
References
http://packetstormsecurity.com/files/156640/Google-Chrome-67-68-69-Object.create-Type-Confusion.htmlhttps://access.redhat.com/errata/RHSA-2018:3004https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.htmlhttps://crbug.com/888923https://security.gentoo.org/glsa/201811-10https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-17463https://www.debian.org/security/2018/dsa-4330http://www.securityfocus.com/bid/105666