Описание
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Ссылки
- Vendor AdvisoryRelease Notes
- Permissions Required
Уязвимые конфигурации
EPSS
3.1 Low
CVSS3
Дефекты
Связанные уязвимости
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.801 ...
Incorrect authorization in PushAPI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
EPSS
3.1 Low
CVSS3