Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-1638

Опубликовано: 06 мар. 2016
Источник: nvd
CVSS3: 6.3
CVSS2: 6.8
EPSS Низкий

Описание

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Версия до 48.0.2564.116 (включая)

EPSS

Процентиль: 73%
0.00765
Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 6.3
ubuntu
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

redhat
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

CVSS3: 6.3
debian
почти 10 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsys ...

CVSS3: 6.3
github
больше 3 лет назад

extensions/renderer/resources/platform_app.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app.

fstec
почти 10 лет назад

Уязвимость браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа

EPSS

Процентиль: 73%
0.00765
Низкий

6.3 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-284