Описание
Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Critical)
Ссылки
- Release Notes
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 148.0.7778.216 (исключая)
Одновременно
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
EPSS
Процентиль: 10%
0.00203
Низкий
9 Critical
CVSS3
Дефекты
CWE-416
Связанные уязвимости
CVSS3: 8.2
redhat
6 месяцев назад
Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Critical)
CVSS3: 9
debian
5 месяцев назад
Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.777 ...
EPSS
Процентиль: 10%
0.00203
Низкий
9 Critical
CVSS3
Дефекты
CWE-416