Описание
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Ссылки
- Vendor Advisory
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 149.0.7827.197 (исключая)
Одновременно
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
EPSS
Процентиль: 1%
0.00105
Низкий
7.8 High
CVSS3
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 7.8
redhat
около 2 месяцев назад
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS3: 7.8
debian
около 2 месяцев назад
Use after free in WebView in Google Chrome on Android prior to 149.0.7 ...
CVSS3: 7.8
github
около 2 месяцев назад
Use after free in WebView in Google Chrome on Android prior to 149.0.7827.197 allowed a local attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
EPSS
Процентиль: 1%
0.00105
Низкий
7.8 High
CVSS3
Дефекты
CWE-416