Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-ghrv-5rxq-4p89

Опубликовано: 30 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium)

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium)

EPSS

Процентиль: 45%
0.00222
Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 3 лет назад

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium)

CVSS3: 8.8
nvd
около 3 лет назад

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via profile destruction. (Chromium security severity: Medium)

msrc
около 3 лет назад

Chromium: CVE-2022-4191 Use after free in Sign-In

CVSS3: 8.8
debian
около 3 лет назад

Use after free in Sign-In in Google Chrome prior to 108.0.5359.71 allo ...

CVSS3: 8.8
fstec
больше 3 лет назад

Уязвимость компонента авторизации браузеров Microsoft Edge и Google Chrome, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 45%
0.00222
Низкий

8.8 High

CVSS3

Дефекты

CWE-416