Lack of access control checks in Instrumentation in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to obtain memory metadata from privileged processes .
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 65.0.3325.146 (excluding) | |
| Red Hat Enterprise Linux 6 Supplementary | RedHat | chromium-browser-0:65.0.3325.146-2.el6_9 | * |
| Chromium-browser | Ubuntu | artful | * |
| Chromium-browser | Ubuntu | trusty | * |
| Chromium-browser | Ubuntu | upstream | * |
| Chromium-browser | Ubuntu | xenial | * |
| Oxide-qt | Ubuntu | artful | * |
| Oxide-qt | Ubuntu | esm-infra/xenial | * |
| Oxide-qt | Ubuntu | trusty | * |
| Oxide-qt | Ubuntu | xenial | * |