CVE-2018-6101

Published: Dec 4, 2018Modified: Jun 17, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

A lack of host validation in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to execute arbitrary code via a crafted HTML page, if the user is running a remote DevTools debugging server.

Affected (6)

Products: Redhat: Linux Desktop, Linux Server, Linux Workstation · Debian: Debian Linux · Google: Chrome

3 products

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Linux Desktop	Version 6.0
Redhat Linux Server	Version 6.0
Redhat Linux Workstation	Version 6.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 66.0.3359.117

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.