CVE-2018-18358 on Ubuntu 18.04 LTS (bionic) - medium.
Description:
Lack of special casing of localhost in WPAD files in Google Chrome prior to 71.0.3578.80 allowed an attacker on the local network segment to proxy resources on localhost via a crafted WPAD file.