{"schemaVersion":3,"id":"CVE-2018-6065","aliases":["UBUNTU-CVE-2018-6065"],"status":"published","duplicateOf":null,"title":"Google Chromium V8 Integer Overflow Vulnerability","description":"Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","dates":{"published":"2018-11-14T15:00:00.000Z","modified":"2025-10-21T23:45:46.861Z","reserved":null,"kevAdded":["2022-06-08T00:00:00.000Z"],"kevDue":["2022-06-22T00:00:00.000Z"]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":7.2,"impact":9.8,"computed":true}]},"epss":{"probability":0.60304,"percentile":0.99135,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.60304},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.60304,"percentile":0.99135}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.60304,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.60304,"percentile":0.99135}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-06-08T00:00:00.000Z","dueDate":"2022-06-22T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Google Chromium V8 Integer Overflow Vulnerability","description":"Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-6065","label":"nvd.nist.gov/vuln/detail/CVE-2018-6065"}],"vendor":"Google","product":"Chromium V8","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-06-08T00:00:00.000Z","dueDate":"2022-06-22T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Google Chromium V8 Integer Overflow Vulnerability","description":"Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","notes":[{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2018-6065","label":"nvd.nist.gov/vuln/detail/CVE-2018-6065"}],"vendor":"Google","product":"Chromium V8","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_4357C0AD04905B07","name":"Exploit Reference (crbug.com)","source":"reference","url":"https://crbug.com/808192","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"44584","name":"Google Chrome V8 - Object Allocation Size Integer Overflow","source":"exploit-database","url":"https://www.exploit-db.com/exploits/44584","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["multiple"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"multiple","file":"exploits/multiple/remote/44584.txt","codes":["CVE-2018-6065"]},"metasploit":null}],"exploitCount":2,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"ubuntu","product":"chromium-browser","name":"chromium-browser","label":"chromium-browser","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/chromium-browser","purlType":"deb","versions":[{"text":"< 65.0.3325.181-0ubuntu0.14.04.1","noFixRecorded":false,"fixedIn":null},{"text":"< 65.0.3325.181-0ubuntu0.16.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 65.0.3325.181-0ubuntu0.14.04.1 | < 65.0.3325.181-0ubuntu0.16.04.1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libv8-3.14","name":"libv8-3.14","label":"libv8-3.14","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libv8-3.14","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"oxide-qt","name":"oxide-qt","label":"oxide-qt","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/oxide-qt","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"9.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.0","eol":{"isEol":true,"eolDate":"2022-07-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"9","label":"9 (Stretch)","eolFrom":"2022-07-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":"9.13"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"google","product":"chrome","name":"Chrome","label":"chrome","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 65.0.3325.146","noFixRecorded":false,"fixedIn":null},{"text":"< 65.0.3325.146","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 65.0.3325.146 | < 65.0.3325.146","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"chrome","label":"Google Chrome","category":"app"}},"hubHref":"/vendor/google/chrome"},{"vendor":"mi","product":"mi6_browser","name":"mi6 browser","label":"mi6_browser","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"na","noFixRecorded":false,"fixedIn":null}],"versionsText":"na","eol":null,"hubHref":"/vendor/mi/mi6_browser"},{"vendor":"redhat","product":"enterprise_linux_desktop","name":"enterprise linux desktop","label":"enterprise_linux_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server","name":"enterprise linux server","label":"enterprise_linux_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation","name":"enterprise linux workstation","label":"enterprise_linux_workstation","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.0","eol":null,"hubHref":"/vendor/redhat/enterprise_linux_workstation"}],"affectedCount":9,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://crbug.com/808192","label":"crbug.com/808192","hostname":"crbug.com","tags":["X Refsource MISC","Exploit","Issue Tracking"]},{"url":"https://chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html","label":"chromereleases.googleblog.com/2018/03/stable-channel-update-for-desktop.html","hostname":"chromereleases.googleblog.com","tags":["X Refsource CONFIRM","Release Notes","Vendor Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/103297","label":"www.securityfocus.com/bid/103297","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link","Third Party Advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0484","label":"access.redhat.com/errata/RHSA-2018:0484","hostname":"access.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/44584/","label":"www.exploit-db.com/exploits/44584/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"https://www.debian.org/security/2018/dsa-4182","label":"www.debian.org/security/2018/dsa-4182","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Mailing List","Third Party Advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-19-367/","label":"www.zerodayinitiative.com/advisories/ZDI-19-367/","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6065","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-6065","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://ubuntu.com/security/CVE-2018-6065","label":"ubuntu.com/security/CVE-2018-6065","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6065","label":"www.cve.org/CVERecord?id=CVE-2018-6065","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["DSA-4182-1","MGASA-2018-0268","OPENSUSE-SU-2018:1175-1","OPENSUSE-SU-2018:1437-1","OPENSUSE-SU-2024:10681-1","OPENSUSE-SU-2024:12948-1","RHSA-2018:0484"],"duplicates":[],"related":["OPENSUSE-SU-2018:1175-1","OPENSUSE-SU-2018:1437-1","OPENSUSE-SU-2024:10681-1","OPENSUSE-SU-2024:12948-1"]},"timeline":[{"kind":"published","date":"2018-11-14T15:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-06-08T00:00:00.000Z","label":"Added to CISA KEV","detail":"Google Chromium V8 Integer Overflow Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-06-22T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:45:46.861Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:31:41.296Z","stale":false,"partial":false}}