CVE-2018-6127

CVE-2018-6127 is a critical vulnerability affecting Google Chrome prior to version 67.0.3396.62, as well as Debian and Red Hat distributions. It involves an early free of an object in use within IndexDB, allowing a remote attacker to potentially perform a sandbox escape via a crafted HTML page if the renderer process is compromised. With a CVSS score of 9.6 (CRITICAL), this vulnerability is easily exploitable over a network with low attack complexity, requiring user interaction, and could lead to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential interest from threat actors.