Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fqrm-q7vr-pmgj

Опубликовано: 09 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.1

Описание

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 12%
0.00218
Низкий

3.1 Low

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 3.1
ubuntu
10 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 3.1
nvd
10 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

msrc
4 дня назад

Chromium CVE-2026-87652: Incorrect authorization in PushAPI

CVSS3: 3.1
debian
10 дней назад

Incorrect authorization in PushAPI in Google Chrome prior to 153.0.801 ...

EPSS

Процентиль: 12%
0.00218
Низкий

3.1 Low

CVSS3

Дефекты

CWE-863