← Back

CVE-2018-10229

nvd nist
Published: May 4, 2018Modified: Nov 21, 2024

JSON object

Loading...
4.8
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Exploitability: 2.2 / Impact: 2.5
Source: NVD

Description

A hardware vulnerability in GPU memory modules allows attackers to accelerate micro-architectural attacks through the use of the JavaScript WebGL API.

Affected (3)

Products: Google: Chrome · Mozilla: Firefox · Lg: Nexus 5
Google
1 product
Chrome
Mozilla
1 product
Firefox
Lg
1 product
Nexus 5
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Chrome
All versions
Firefox
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Nexus 5
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Source: cve@mitre.org
Technical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Technical DescriptionThird Party Advisory

Timeline

No history available yet.