CVE-2018-6052

CVE-2018-6052 describes a vulnerability in Google Chrome versions prior to 64.0.3282.119, specifically affecting its Blink rendering engine, where a non-standard "no-referrer" policy value was not properly honored. This flaw allowed remote attackers to bypass intended referrer data suppression, potentially exposing referrer details from web pages that believed they had opted out. The vulnerability has a CVSS v3 score of 4.3 (Medium), indicating a network-based attack requiring user interaction, with a low impact on confidentiality and no impact on integrity or availability. Its low EPSS score and FAUCET Risk Score suggest a limited likelihood of exploitation and overall risk. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. The vulnerability has received no community discussion or media coverage, further indicating a low level of attention and perceived threat.