Описание
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
Ссылки
- Release NotesVendor Advisory
- ExploitIssue TrackingVendor Advisory
- Release NotesVendor Advisory
- ExploitIssue TrackingVendor Advisory
Уязвимые конфигурации
Одновременно
EPSS
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chromium security severity: Medium)
Chromium: CVE-2022-3310 Insufficient policy enforcement in Custom Tabs
Insufficient policy enforcement in custom tabs in Google Chrome on And ...
Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. (Chrome security severity: Medium)
Уязвимость пользовательских вкладок браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти существующие ограничения безопасности и раскрыть защищаемую информацию
EPSS
6.5 Medium
CVSS3