Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fmj-pwmm-hx82

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

EPSS

Процентиль: 59%
0.00377
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.6
ubuntu
около 7 лет назад

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS3: 9.6
nvd
около 7 лет назад

Using an ID that can be controlled by a compromised renderer which allows any frame to overwrite the page_state of any other frame in the same process in Navigation in Google Chrome on Chrome OS prior to 62.0.3202.74 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

EPSS

Процентиль: 59%
0.00377
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-20