Описание
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
A flaw was found in Google Chrome's CredentialProvider on Windows. This race condition vulnerability allows a local attacker to execute code with elevated operating system (OS) privileges. The attacker can achieve this by exploiting the flaw with a specially crafted malicious file, leading to OS-level privilege escalation.
Отчет
This Moderate impact flaw affects Google Chrome's CredentialProvider on Windows, allowing a local attacker to achieve OS-level privilege escalation through a race condition with a malicious file. While Red Hat distributes the chromium component in community projects like Fedora and EPEL, this specific vulnerability is not applicable to Linux-based environments.
Дополнительная информация
Статус:
EPSS
6.7 Medium
CVSS3
Связанные уязвимости
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
Race in CredentialProvider in Google Chrome on Windows prior to 151.0. ...
Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)
EPSS
6.7 Medium
CVSS3