Описание
Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| chromium | fixed | 148.0.7778.215-1 | package | |
| chromium | end-of-life | bullseye | package | |
| webkit2gtk | fixed | 2.54.0-1 | package | |
| webkit2gtk | end-of-life | bookworm | package | |
| webkit2gtk | end-of-life | bullseye | package | |
| wpewebkit | fixed | 2.54.0-1 | package | |
| wpewebkit | ignored | trixie | package | |
| wpewebkit | ignored | bookworm | package | |
| wpewebkit | end-of-life | bullseye | package |
Примечания
https://webkitgtk.org/security/WSA-2026-0006.html
EPSS
Связанные уязвимости
Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Uninitialized Use in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Уязвимость компонента ANGLE веб-браузера Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным
EPSS