Skip to content
OpenAdvisories
Unscored CVE-2018-16072 EUVD-2018-7929GHSA-7fcg-2p4q-xrxx

A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same or…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium-browser Package: oxide-qt Category: Browsers Ecosystem: Ubuntu

Description

A missing origin check related to HLS manifests in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 69.0.3497.81 69.0.3497.81

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 69.0.3497.81-0ubuntu0.18.04.1 —
Ubuntu 16.04 LTS chromium-browser 69.0.3497.81-0ubuntu0.16.04.1 —
Ubuntu 16.04 LTS oxide-qt No fix yet —

References