GHSA-gcrp-pj35-9x65

Опубликовано: 09 сент. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 4.3

Описание

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Ссылки

EPSS

Процентиль: 14%

0.00233

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2026-87632

Дефекты

CWE-79

Связанные уязвимости

CVE-2026-87632

CVSS3: 4.3

ubuntu

10 дней назад

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87632

CVSS3: 4.3

nvd

10 дней назад

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-87632

msrc

4 дня назад

Chromium CVE-2026-87632: Cross-site scripting in SanitizerAPI

CVE-2026-87632

CVSS3: 4.3

debian

10 дней назад

Cross-site scripting in SanitizerAPI in Google Chrome prior to 153.0.8 ...

EPSS

Процентиль: 14%

0.00233

Низкий

4.3 Medium

CVSS3

CVE ID

CVE-2026-87632

Дефекты

CWE-79