Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fv55-2p8j-mhm4

Опубликовано: 25 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

EPSS

Процентиль: 17%
0.00264
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
ubuntu
2 месяца назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

CVSS3: 4.3
nvd
2 месяца назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. (Chromium security severity: Medium)

msrc
около 2 месяцев назад

Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker

CVSS3: 4.3
debian
2 месяца назад

Incorrect authorization in ServiceWorker in Google Chrome prior to 152 ...

CVSS3: 4.3
fstec
5 месяцев назад

Уязвимость интерфейса ServiceWorker браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю получить доступ к защищаемой информации

EPSS

Процентиль: 17%
0.00264
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-863