Описание
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Ссылки
- Release NotesVendor Advisory
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 152.0.7977.65 (исключая)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.0037
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 4.3
ubuntu
5 дней назад
(Improper input validation in StorageAccessAPI in Google Chrome prior t ...)
CVSS3: 4.3
debian
6 дней назад
Improper input validation in StorageAccessAPI in Google Chrome prior t ...
CVSS3: 4.3
github
6 дней назад
Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
EPSS
Процентиль: 30%
0.0037
Низкий
4.3 Medium
CVSS3
Дефекты
CWE-20