Описание
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| chromium | fixed | 93.0.4577.82-1 | package | |
| chromium | end-of-life | buster | package | |
| chromium | end-of-life | stretch | package | |
| libxslt | fixed | 1.1.35-1 | package |
Примечания
https://bugs.chromium.org/p/chromium/issues/detail?id=1219209
https://gitlab.gnome.org/GNOME/libxslt/commit/50f9c9cd3b7dfe9b3c8c795247752d1fdcadcac8 (v1.1.35)
EPSS
Процентиль: 26%
0.00092
Низкий
Связанные уязвимости
CVSS3: 8.8
ubuntu
больше 4 лет назад
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS3: 8.8
nvd
больше 4 лет назад
Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
EPSS
Процентиль: 26%
0.00092
Низкий