Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r7r9-m9jw-3jph

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

EPSS

Процентиль: 67%
0.00548
Низкий

8.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 7 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 6.5
redhat
почти 8 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 8.8
nvd
около 7 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to bypass OS level controls via a crafted HTML page.

CVSS3: 8.8
debian
около 7 лет назад

Failure to apply Mark-of-the-Web in Downloads in Google Chrome prior t ...

suse-cvrf
почти 8 лет назад

Security update for Chromium

EPSS

Процентиль: 67%
0.00548
Низкий

8.8 High

CVSS3

Дефекты

CWE-20