Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6w7-99w8-xfj4

Опубликовано: 15 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 52%
0.00293
Низкий

8.8 High

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 8.8
nvd
5 месяцев назад

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

msrc
5 месяцев назад

Chromium: CVE-2025-0443 Insufficient data validation in Extensions

CVSS3: 8.8
debian
5 месяцев назад

Insufficient data validation in Extensions in Google Chrome prior to 1 ...

CVSS3: 8.8
fstec
5 месяцев назад

Уязвимость компонента Extensions (Расширения) браузера Google Chrome и Microsoft Edge, позволяющая нарушителю повысить свои привилегии

suse-cvrf
5 месяцев назад

Security update for chromium

EPSS

Процентиль: 52%
0.00293
Низкий

8.8 High

CVSS3

Дефекты

CWE-79