Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-13097

Опубликовано: 14 нояб. 2025
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=2414972chromium-browser: Inappropriate implementation in DevTools

EPSS

Процентиль: 5%
0.00159
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
ubuntu
9 месяцев назад

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 5.4
nvd
9 месяцев назад

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 5.4
debian
9 месяцев назад

Inappropriate implementation in DevTools in Google Chrome prior to 136 ...

CVSS3: 5.4
github
9 месяцев назад

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 5.4
fstec
больше 1 года назад

Уязвимость компонента DevTools браузера Google Chrome, позволяющая нарушителю обойти защитный механизм песочницы

EPSS

Процентиль: 5%
0.00159
Низкий

6.5 Medium

CVSS3

Уязвимость CVE-2025-13097