CVE-2018-17480

A Chromium V8 out-of-bounds write vulnerability allowed remote code execution via crafted HTML, impacting multiple browsers including Chrome and Edge, and is currently being exploited in the wild.

This vulnerability in the Chromium V8 engine enables remote code execution within a sandbox, affecting numerous browsers and posing a significant risk to DIB organizations reliant on these platforms. Failure to promptly patch exposes systems to potential compromise and impacts NIST 800-171 compliance requirements related to vulnerability management. Immediate patching and browser updates are critical.

Shame score — The vulnerability's active exploitation and potential for widespread impact, despite being a known issue, demonstrates a concerning lack of proactive security measures.