Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j5j3-r8p4-3g3f

Опубликовано: 01 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 25%
0.00328
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 месяца назад

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
redhat
около 1 месяца назад

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
nvd
около 1 месяца назад

Insufficient validation of untrusted input in DeviceBoundSessionCredentials in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)

msrc
около 1 месяца назад

Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials

CVSS3: 6.5
debian
около 1 месяца назад

Insufficient validation of untrusted input in DeviceBoundSessionCreden ...

EPSS

Процентиль: 25%
0.00328
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20