Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x6cw-4j84-hpjf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

EPSS

Процентиль: 28%
0.00352
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 5.7
ubuntu
около 7 лет назад

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

CVSS3: 6.5
redhat
около 8 лет назад

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

CVSS3: 5.7
nvd
около 7 лет назад

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

CVSS3: 5.7
debian
около 7 лет назад

Use after free in Bluetooth in Google Chrome prior to 68.0.3440.75 all ...

CVSS3: 5.7
fstec
около 8 лет назад

Уязвимость компонента WebBluetooth браузера Google Chrome, позволяющая нарушителю инициировать установку вредоносного расширения Chrome и получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 28%
0.00352
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-416