Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vmwr-6hc4-r546

Опубликовано: 09 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

EPSS

Процентиль: 11%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-295

Связанные уязвимости

CVSS3: 7.5
ubuntu
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

CVSS3: 7.5
nvd
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

msrc
4 дня назад

Chromium CVE-2026-87608: Improper certificate validation in FedCM

CVSS3: 7.5
debian
10 дней назад

Improper certificate validation in FedCM in Google Chrome prior to 153 ...

EPSS

Процентиль: 11%
0.00206
Низкий

7.5 High

CVSS3

Дефекты

CWE-295