Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7r9-m9jw-3jph

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

EPSS

Процентиль: 73%
0.01521
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 8 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 6.5
redhat
больше 8 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 8.8
nvd
почти 8 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 8.8
debian
почти 8 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior t ...

suse-cvrf
больше 8 лет назад

Security update for Chromium

EPSS

Процентиль: 73%
0.01521
Низкий

8.8 High

CVSS3

Дефекты

CWE-20