Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-0790

Опубликовано: 05 апр. 2022
Источник: debian
EPSS Низкий

Описание

Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed99.0.4844.51-1package
chromiumend-of-lifebusterpackage
chromiumend-of-lifestretchpackage

Примечания

  • https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop.html

EPSS

Процентиль: 68%
0.00577
Низкий

Связанные уязвимости

CVSS3: 9.6
ubuntu
почти 4 года назад

Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 9.6
nvd
почти 4 года назад

Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.

msrc
почти 4 года назад

Chromium: CVE-2022-0790 Use after free in Cast UI

CVSS3: 9.6
github
почти 4 года назад

Use after free in Cast UI in Google Chrome prior to 99.0.4844.51 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 9.8
fstec
около 4 лет назад

Уязвимость интерфейса Cast UI браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 68%
0.00577
Низкий