Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-15966

Опубликовано: 21 сент. 2020
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=1881599chromium-browser: Insufficient policy enforcement in extensions

EPSS

Процентиль: 69%
0.01331
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
ubuntu
почти 6 лет назад

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.

CVSS3: 4.3
nvd
почти 6 лет назад

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.

CVSS3: 4.3
debian
почти 6 лет назад

Insufficient policy enforcement in extensions in Google Chrome prior t ...

github
больше 4 лет назад

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension.

CVSS3: 5.3
fstec
почти 6 лет назад

Уязвимость расширений браузера Google Chrome, связанная с недостатками разграничения доступа к некоторым функциям, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 69%
0.01331
Низкий

6.5 Medium

CVSS3