Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-48x8-q2fp-cpc8

Опубликовано: 01 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 17%
0.00257
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.8
redhat
около 1 месяца назад

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
nvd
около 1 месяца назад

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

msrc
около 1 месяца назад

Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI

CVSS3: 6.5
debian
около 1 месяца назад

Insufficient policy enforcement in StorageAccessAPI in Google Chrome p ...

EPSS

Процентиль: 17%
0.00257
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20