CVE-2018-18350 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Incorrect handling of CSP enforcement during navigations in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.