Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4crv-j7p5-3hm3

Опубликовано: 07 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

EPSS

Процентиль: 10%
0.00035
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 4.3
ubuntu
5 месяцев назад

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 4.3
nvd
5 месяцев назад

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

msrc
5 месяцев назад

Chromium: CVE-2025-8581 Inappropriate implementation in Extensions

CVSS3: 4.3
debian
5 месяцев назад

Inappropriate implementation in Extensions in Google Chrome prior to 1 ...

CVSS3: 4.3
fstec
8 месяцев назад

Уязвимость компонента Extensions (Расширения) браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 10%
0.00035
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-79