CVE-2026-11020

Опубликовано: 02 июн. 2026

Источник: redhat

CVSS3: 7.4

EPSS Низкий

Описание

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. (Chromium security severity: Medium)

An inappropriate implementation flaw was found in the Extensions component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=497440270

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Ссылки на источники

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-346

https://bugzilla.redhat.com/show_bug.cgi?id=2485252chromium-browser: Inappropriate implementation in Extensions

EPSS

Процентиль: 13%

0.00221

Низкий

7.4 High

CVSS3

Связанные уязвимости

CVE-2026-11020

CVSS3: 6.5

ubuntu

2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. (Chromium security severity: Medium)

CVE-2026-11020

CVSS3: 6.5

nvd

2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. (Chromium security severity: Medium)

CVE-2026-11020

msrc

2 месяца назад

Chromium: CVE-2026-11020 Inappropriate implementation in Extensions

CVE-2026-11020

CVSS3: 6.5

debian

2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 1 ...

GHSA-hjpv-wxpg-mvhc

CVSS3: 6.5

github

2 месяца назад

Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. (Chromium security severity: Medium)

EPSS

Процентиль: 13%

0.00221

Низкий

7.4 High

CVSS3