CVE-2018-18352

CVE-2018-18352 describes a medium-severity vulnerability in Google Chrome prior to version 71.0.3578.80, also affecting Debian and Red Hat distributions. This flaw allowed service workers to bypass the same-origin policy for audio content, enabling a remote attacker to gain unauthorized access to cross-origin audio via a specially crafted HTML page. The vulnerability has a CVSS score of 6.5, indicating a network-based attack with low complexity requiring user interaction, leading to high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, and it has received minimal community discussion and media coverage.