Описание
Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)
Ссылки
- Release Notes
- Issue TrackingPermissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 143.0.7499.192 (исключая)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.20948
Средний
8.8 High
CVSS3
Дефекты
CWE-862
Связанные уязвимости
msrc
10 месяцев назад
Chromium: CVE-2026-0628 Insufficient policy enforcement in WebView tag
CVSS3: 8.8
debian
10 месяцев назад
Insufficient policy enforcement in WebView tag in Google Chrome prior ...
CVSS3: 8.8
github
10 месяцев назад
Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scripts or HTML into a privileged page via a crafted Chrome Extension. (Chromium security severity: High)
EPSS
Процентиль: 98%
0.20948
Средний
8.8 High
CVSS3
Дефекты
CWE-862