Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7c9p-58x7-4wjx

Опубликовано: 12 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

EPSS

Процентиль: 3%
0.00015
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVSS3: 6.5
redhat
17 дней назад

An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=435980394

CVSS3: 4.3
nvd
15 дней назад

Insufficient policy enforcement in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

msrc
14 дней назад

Chromium: CVE-2026-3928 Insufficient policy enforcement in Extensions

CVSS3: 4.3
debian
15 дней назад

Insufficient policy enforcement in Extensions in Google Chrome prior t ...

suse-cvrf
10 дней назад

Security update for chromium

EPSS

Процентиль: 3%
0.00015
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-451