CVE-2018-6070

CVE-2018-6070 describes a Content Security Policy (CSP) bypass vulnerability in Google Chrome prior to version 65.0.3325.146, specifically affecting WebUI pages within the Bink component. An attacker could exploit this by convincing a user to install a malicious Chrome Extension, thereby circumventing CSP protections. This is a medium-severity vulnerability (CVSS 6.1) requiring user interaction (UI:R) and network access (AV:N). Successful exploitation could lead to limited confidentiality and integrity impacts (C:L/I:L), as an attacker could bypass security policies. There is no evidence of active exploitation (KEV: No), and no public exploit code is available (Metasploit, Nuclei, ExploitDB: None). While there is some community discussion and media coverage, it is not indicative of widespread attention or exploitation.