Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q32c-f6mp-gx6h

Опубликовано: 13 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.

Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.

EPSS

Процентиль: 76%
0.00992
Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 3 лет назад

Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.

CVSS3: 8.8
nvd
больше 3 лет назад

Use after free in Managed devices API in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enable a specific Enterprise policy to potentially exploit heap corruption via a crafted HTML page.

msrc
больше 3 лет назад

Chromium: CVE-2022-2606 Use after free in Managed devices API

CVSS3: 8.8
debian
больше 3 лет назад

Use after free in Managed devices API in Google Chrome prior to 104.0. ...

CVSS3: 8.8
fstec
больше 3 лет назад

Уязвимость интерфейса API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 76%
0.00992
Низкий

8.8 High

CVSS3

Дефекты

CWE-416