Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-18345

Опубликовано: 04 дек. 2018
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1656559chromium-browser: Inappropriate implementation in Site Isolation

EPSS

Процентиль: 72%
0.0072
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 7 лет назад

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.

CVSS3: 6.5
nvd
около 7 лет назад

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.

CVSS3: 6.5
debian
около 7 лет назад

Incorrect handling of blob URLS in Site Isolation in Google Chrome pri ...

CVSS3: 6.5
github
больше 3 лет назад

Incorrect handling of blob URLS in Site Isolation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker who had compromised the renderer process to bypass site isolation protections via a crafted HTML page.

CVSS3: 6.5
fstec
около 7 лет назад

Уязвимость браузера Google Chrome, связанная с элементами безопасности, позволяющая нарушителю обойти защиту изоляции сайта с помощью специально созданной HTML-страницы

EPSS

Процентиль: 72%
0.0072
Низкий

6.5 Medium

CVSS3