Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3rff-rg87-9c8x

Опубликовано: 01 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

EPSS

Процентиль: 7%
0.00026
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.6
nvd
около 1 месяца назад

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

msrc
около 1 месяца назад

Chromium: CVE-2026-5290 Use after free in Compositing

CVSS3: 9.6
debian
около 1 месяца назад

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 ...

CVSS3: 9.6
fstec
около 2 месяцев назад

Уязвимость компонента Compositing браузера Google Chrome, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

suse-cvrf
около 1 месяца назад

Security update for chromium

EPSS

Процентиль: 7%
0.00026
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-416