CVE-2018-17463 CISA KEV · Actively exploited

chromium-browser: Remote code execution in V8

CVSS score

8.8

EPSS probability

%84.6

Risk score

14.9

Published

8 y ago

Overview Public Exploits (3)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Google Chrome 67_ 68 and 69 - Object.create Type Confusion (Metasploit)

Exploit-DB

Google Chrome 67_ 68 and 69 - Object.create Type Confusion (Metasploit)

Exploit referenceSource updated: 09.03.2020 00:00:00

jhalon/CVE-2018-17463

GitHub

Working Proof of Concept Exploit for CVE-2018-17463

Public PoC

kdmarti2/CVE-2018-17463

GitHub

Completed a working exploit for CVE-2018-17463 for fun.

Public PoC

Similar Vulnerabilities

9.8

CVE-2024-23897 Actively exploited

jenkins: Arbitrary file read vulnerability through the CLI can lead to RCE

VendorRed HatProductred_hat_openshift_container_platform_3.11:jenkins+9 etkilenen

Partial patchEPSS %1002 y ago

9.8

CVE-2022-22963 Actively exploited

spring-cloud-function: Remote code execution by malicious Spring Expression

VendorRed HatProduct8Base-Openshift-Serverless-1.21:openshift-serverless-1/client-kn-rhel8@sha256:2199a60cb46225b1551c0882fa0694fa846df5d6e3246f7cfbf6ddf5b55f6b5f_ppc64le+9 etkilenen

Patch verifiedEPSS %1004 y ago

9.8

CVE-2023-46604 Actively exploited

activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

VendorRed HatProductred_hat_jboss_fuse_service_works_6:activemq-openwire+8 etkilenen

Partial patchEPSS %1003 y ago

9.8

CVE-2012-0507 Actively exploited

Vulnerability in N/a

Vendorn/aProductn/a+24 etkilenen

Partial patchEPSS %9814 y ago

9.6

CVE-2023-4863 Actively exploited

libwebp: Heap buffer overflow in WebP Codec

VendorRed HatProductred_hat_enterprise_linux_6:firefox+24 etkilenen

Partial patchEPSS %1003 y ago

9.8

CVE-2020-11651 Actively exploited

salt: salt-master process ClearFuncs class does not properly validate method calls

VendorRed HatProductred_hat_ceph_storage_2:salt+3 etkilenen

No patch (vendor)EPSS %976 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2018-17463"