CVE-2018-17463

Google Chrome and Chromium's V8 JavaScript engine, prior to the Chrome 70.0.3538.64 release, contained an incorrect side-effect annotation that corrupts type information during optimization (a type confusion reachable via Object.create), allowing arbitrary code execution inside the browser sandbox. An attacker triggers the flaw by persuading a user to open a crafted HTML page; successful exploitation yields remote code execution running with the browser's privileges, though still confined by the Chrome sandbox. Anyone running Chrome or Chromium before 70.0.3538.64 was affected, including the chromium packages shipped in Red Hat Enterprise Linux and Debian. A public proof of concept covering Chrome 67-69 is available, EPSS assigns an ~85% 30-day exploitation probability (top percentile), and CISA added the issue to the Known Exploited Vulnerabilities catalog on 2022-06-08, confirming exploitation in the wild.

What to do: Update Chrome to 70.0.3538.64 or later (any current release is patched) and apply the latest chromium/chromium-browser security updates on Red Hat Enterprise Linux and Debian. Inventory endpoints and managed browsers for Chrome/Chromium builds older than 70 and verify auto-update is enabled; because exploitation requires user interaction with a crafted page, user awareness and web filtering provide additional defense.