Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2018-6176

Опубликовано: 24 июл. 2018
Источник: redhat
CVSS3: 6.5

Описание

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1608200chromium-browser: Local user privilege escalation in Extensions

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 7 лет назад

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.

CVSS3: 7.8
nvd
около 7 лет назад

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.

CVSS3: 7.8
debian
около 7 лет назад

Insufficient file type enforcement in Extensions API in Google Chrome ...

CVSS3: 7.8
github
больше 4 лет назад

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость функции chrome.downloads.open() браузера Google Chrome, позволяющая нарушителю повысить свои привилегии

6.5 Medium

CVSS3