Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4crv-j7p5-3hm3

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 15%
0.00048
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
ubuntu
2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 4.3
nvd
2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

msrc
2 месяца назад

Chromium: CVE-2025-8581 Inappropriate implementation in Extensions

CVSS3: 4.3
debian
2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 1 ...

CVSS3: 4.3
fstec
5 месяцев назад

Уязвимость компонента Extensions (Расширения) браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 15%
0.00048
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79