Описание
Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
Ссылки
- Release NotesVendor Advisory
- Permissions Required
- Third Party Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Permissions Required
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Одновременно
Одно из
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
Связанные уязвимости
Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
Chromium CVE-2021-21186: Insufficient policy enforcement in QR scanning
Insufficient policy enforcement in QR scanning in Google Chrome on iOS ...
Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
Уязвимость функции QR-сканера браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения доступа
EPSS
4.3 Medium
CVSS3
4.3 Medium
CVSS2