Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hqv4-r44g-hxcx

Опубликовано: 06 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.

EPSS

Процентиль: 51%
0.00737
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 4 лет назад

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS3: 8.8
nvd
больше 4 лет назад

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed an attacker who convinced a user to install a malicious extension and engage in specific user interaction to potentially exploit heap corruption via a crafted Chrome Extension.

msrc
больше 4 лет назад

Chromium: CVE-2022-0793 Use after free in Views

CVSS3: 8.8
debian
больше 4 лет назад

Use after free in Cast in Google Chrome prior to 99.0.4844.51 allowed ...

CVSS3: 9.8
fstec
больше 4 лет назад

Уязвимость компонента Views браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю вызвать выполнить произвольный код

EPSS

Процентиль: 51%
0.00737
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-416