Описание
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
Ссылки
- Vendor AdvisoryRelease Notes
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 153.0.8010.36 (исключая)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00242
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 6.5
ubuntu
10 дней назад
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
CVSS3: 6.5
debian
10 дней назад
Incorrect authorization in Extensions in Google Chrome prior to 153.0. ...
CVSS3: 6.5
github
10 дней назад
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)
EPSS
Процентиль: 16%
0.00242
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-863