CVE-2018-6053 Information disclosure in Chrome

Low 3.3 Published Updated

A local attacker can view website thumbnail images after clearing browser data via a crafted HTML page in Google Chrome.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Local or same network only
Victim action needed
A user has to click or open something
Fix
Available

What is CVE-2018-6053?

CVE-2018-6053 is a low-severity vulnerability in Debian Debian Linux, published on 25 Sep 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Inappropriate implementation in New Tab Page in Google Chrome prior to 64.0.3282.119 allowed a local attacker to view website thumbnail images after clearing browser data via a crafted HTML page.

Weakness: CWE-200

Which versions are affected by CVE-2018-6053?

It affects 5 products.

Products include Debian Debian Linux, Google Chrome, Redhat Enterprise Linux Desktop, Redhat Enterprise Linux Server, Redhat Enterprise Linux Workstation.

How do I fix CVE-2018-6053?

Upgrade to a fixed version.

Is CVE-2018-6053 being exploited?

There is no known exploitation of CVE-2018-6053 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as GHSA-c5vp-q9xm-7xrq, UBUNTU-CVE-2018-6053.

Is CVE-2018-6053 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free