Files
CVEs-PoC/2018/CVE-2018-6086.md
T
2024-05-26 14:27:05 +02:00

18 lines
706 B
Markdown

### [CVE-2018-6086](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6086)
![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%2066.0.3359.117%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Use%20after%20free&color=brighgreen)
### Description
A double-eviction in the Incognito mode cache that lead to a user-after-free in Networking Disk Cache in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/allpaca/chrome-sbx-db