Описание
Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Ссылки
- Release NotesVendor Advisory
- ExploitIssue TrackingPatchPermissions RequiredVendor Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- ExploitIssue TrackingPatchPermissions RequiredVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одновременно
Одно из
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Chromium: CVE-2021-30507 Inappropriate implementation in Offline
Inappropriate implementation in Offline in Google Chrome on Android pr ...
Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
Уязвимость автономного режима браузера Google Chrome, связанная с включением функций из недостоверной контролируемой области, позволяющая нарушителю обойти существующие ограничения безопасности с помощью специально созданной HTML страницы
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2