Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jq54-839p-hjhg

Опубликовано: 17 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.2

Описание

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

EPSS

Процентиль: 79%
0.01906
Низкий

8.2 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 7.4
nvd
3 месяца назад

Adobe Acrobat PDF Extension (Chrome) versions 26.5.2.2 and earlier are affected by a UXSS-class cross-origin data disclosure vulnerability. An attacker could exploit this vulnerability to gain access to data regarding the victim's session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

CVSS3: 7.4
fstec
3 месяца назад

Уязвимость расширения Adobe Acrobat PDF браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 79%
0.01906
Низкий

8.2 High

CVSS3

Дефекты

CWE-79