Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vvw2-cwrq-mprr

Опубликовано: 02 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.6

Описание

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chrome security severity: Medium)

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chrome security severity: Medium)

EPSS

Процентиль: 9%
0.00031
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-20
CWE-306

Связанные уязвимости

CVSS3: 4.6
ubuntu
больше 3 лет назад

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium)

CVSS3: 4.6
nvd
больше 3 лет назад

Insufficient validation of untrusted input in VPN in Google Chrome on ChromeOS prior to 106.0.5249.62 allowed a local attacker to bypass managed device restrictions via physical access to the device. (Chromium security severity: Medium)

CVSS3: 4.6
debian
больше 3 лет назад

Insufficient validation of untrusted input in VPN in Google Chrome on ...

CVSS3: 6.5
fstec
больше 3 лет назад

Уязвимость расширения VPN браузера Google Chrome, позволяющая нарушителю раскрыть защищаемую информацию

suse-cvrf
больше 3 лет назад

Security update for chromium

EPSS

Процентиль: 9%
0.00031
Низкий

4.6 Medium

CVSS3

Дефекты

CWE-20
CWE-306