Описание
Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: High)
An insufficient policy enforcement flaw was found in the File System Access component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=517484284
Отчет
Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.
Дополнительная информация
Статус:
EPSS
8 High
CVSS3
Связанные уязвимости
Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: High)
Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: High)
Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access
Insufficient policy enforcement in File System Access in Google Chrome ...
Insufficient policy enforcement in File System Access in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. (Chromium security severity: High)
EPSS
8 High
CVSS3