CVE-2018-6055: Google Chrome

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Insufficient policy enforcement in Catalog Service in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially run arbitrary code outside sandbox via a crafted HTML page.

Affected products

• Google Chrome: before 64.0.3282.119 (fixed in 64.0.3282.119)

Published 2018-09-25. Last modified 2026-06-17.